[cfe-users] Running 'scan-build' in SRD's test cases (NIST)
Lucas Kanashiro
kanashiro.duarte at gmail.com
Mon Feb 17 17:05:11 PST 2014
Thanks Jordan!
Could you leave me updated on the matter? I am so interested in this,
and if it is necessary and possible i want to help to solve the
potential issue.
Edward, can you tell us your experience with Clang and Juliet Test
Suite?
On Mon, 2014-02-17 at 09:43 -0800, Jordan Rose wrote:
> Hi, Lucas. The analyzer currently runs a per-translation-unit analysis, so it misses some bugs that whole-program analysis may be able to catch. I'm guessing that's the reason it's unable to catch this particular issue.
>
> In general, the analyzer is set for reasonably fast turnaround (depending on the size of the project, of course), so it also might not do a fully precise interprocedural analysis if the state space gets too big. I'd have to see the particular test case to tell what's going on here.
>
> I did see that Edward (CC'd) wanted to try bringing in the Juliet Test Suite for the analyzer, but neither I nor Ted (the lead on the analyzer) have gotten the chance to sit down and look at what this would actually entail. It's possible he's encountered similar issues, however.
>
> Jordan
>
>
> On Feb 15, 2014, at 5:58 , Lucas Kanashiro <kanashiro.duarte at gmail.com> wrote:
>
> > I am trying to running 'scan-build' in Juliet suite testcase v1.2 (NIST
> > indication) to catch some bugs of 'Division by zero' (CWE 369) and I
> > can't do it, the scan-build can't show me the existing bugs. Did someone
> > try to do it yet?
> >
> > I have a doubt that scan-build can identify a bug of division by zero in
> > this case (when parameter denominator is zero):
> >
> > int divide (int denominator) {
> > return 10/denominator;
> > }
> >
> > Can someone help me? Is this a deficiency of scan-build? Can scan-build
> > identify the bugs in Juliet suite?
> >
> > Thanks in advance!
> >
> > --
> > Lucas Kanashiro Duarte
> > Engenharia de Software - FGA/UnB
> > kanashiro.duarte at gmail.com
> >
> > _______________________________________________
> > cfe-users mailing list
> > cfe-users at cs.uiuc.edu
> > http://lists.cs.uiuc.edu/mailman/listinfo/cfe-users
>
--
Lucas Kanashiro Duarte
Engenharia de Software - FGA/UnB
kanashiro.duarte at gmail.com
More information about the cfe-users
mailing list