Skip to main content

Observable Runtime Behavior for Defects Indicated by Automated Static Analysis

  • Conference paper
Computer Aided Systems Theory - EUROCAST 2009 (EUROCAST 2009)

Part of the book series: Lecture Notes in Computer Science ((LNTCS,volume 5717))

Included in the following conference series:

  • 1103 Accesses

Abstract

For the efficient and effective use of automated static analysis of software systems it is crucial to know what kind of errors can be detected and how seriously a reported problem can or should be taken. In the study conducted for this paper we applied a widely used tool (PC-lint) for automated static analysis (ASA) to check C++ code fragments from student exercises. The goal of this research was to discover which types of defects can be identified by automated static analysis. In this paper we present our findings; furthermore the results from classifying the defects are set in relation to detection rules and severity levels provided by ASA, in order to derive insights for calibrating ASA tools in a specific application context.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Ayewah, N., Pugh, W., Morgenthaler, J.D., Penix, J., Zhou, Y.: Evaluating static analysis defect warnings on production software. In: PASTE 2007: Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, pp. 1–8. ACM, New York (2007)

    Google Scholar 

  2. Barr, A.: Find the Bug: A Book of Incorrect Programs. Addison-Wesley Professional, Reading (2004)

    Google Scholar 

  3. Chillarege, R., Bhandari, I., Chaar, J., Halliday, M., Moebus, D., Ray, B., Wong, M.: Orthogonal Defect Classification: a Concept for In-process Measurements. IEEE Transactions on Software Engineering 18(11), 943–956 (1992)

    Article  Google Scholar 

  4. Cousot, P., Cousot, R., Feret, J., Mauborgne, L., Miné, A., Monniaux, D., Rival, X.: Varieties of Static Analyzers: A Comparison with ASTRÉE. In: First IEEE & IFIP International Symposium on Theoretical Aspects of Software Engineering, TASE 2007, Shanghai, China, pp. 3–17 (2007)

    Google Scholar 

  5. Dobler, H., Ramler, R., Wolfmaier, K.: A Study of Tool Support for the Evaluation of Student’s Solutions of Exercises in Programming. In: EuroCAST (2007)

    Google Scholar 

  6. Emanuelsson, P., Nilsson, U.: A Comparative Study of Industrial Static Analysis Tools (extended version), Technical report, Linkoping University, Linköping University Electronic Press (2008)

    Google Scholar 

  7. Huber, J. T.: A Comparison of IBM’s Orthogonal Defect Classification to Hewlett Packard’s Defect Origins, Types, and Modes (1989), http://www.stickyminds.com/sitewide.asp?Function=edetail&ObjectType=ART&ObjectId=2883

  8. Jaspan, C., Chen, I., Sharma, A.: Understanding the value of program analysis tools. In: OOPSLA 2007: Companion to the 22nd ACM SIGPLAN conference on Object oriented programming systems and applications companion, pp. 963–970. ACM, New York (2007)

    Google Scholar 

  9. Knuth, D.E.: The errors of TEX. Softw. Pract. Exper. 19(7), 607–685 (1989)

    Article  MATH  Google Scholar 

  10. Meyers, S.: Effective C++: 55 Specific Ways to Improve Your Programs and Designs, 3rd edn. Addison-Wesley, Reading (2005)

    Google Scholar 

  11. Rutar, N., Almazan, C.B., Foster, J.S.: A Comparison of Bug Finding Tools for Java. In: ISSRE 2004: Proceedings of the 15th International Symposium on Software Reliability Engineering, pp. 245–256. IEEE Computer Society, Washington (2004)

    Google Scholar 

  12. Zheng, J., Williams, L., Nagappan, N., Snipes, W., Hudepohl, J.P., Vouk, M.A.: On the value of static analysis for fault detection in software. IEEE Transactions on Software Engineering 32(4), 240–253 (2006)

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2009 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Wolfmaier, K., Ramler, R., Guta, G., Dobler, H. (2009). Observable Runtime Behavior for Defects Indicated by Automated Static Analysis. In: Moreno-Díaz, R., Pichler, F., Quesada-Arencibia, A. (eds) Computer Aided Systems Theory - EUROCAST 2009. EUROCAST 2009. Lecture Notes in Computer Science, vol 5717. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-04772-5_41

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-04772-5_41

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-04771-8

  • Online ISBN: 978-3-642-04772-5

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics