开发者

Is there anything like PPI or Perl::Critic for C?

PPI and Perl::Critic allow programmers to detect certain things in the syntax of their Perl programs.

Is there anything like it that will tokenize/parse C and give you a chance to 开发者_开发技巧write a script to do something with that information?


C related programs:

  • BLAST (Berkeley Lazy Abstraction Software verification Tool) — a software model checker for C programs based on lazy abstraction.
  • Clang — A compiler that includes a static analyzer.

  • Frama-C — A static analysis framework for C.

  • Sparse — A tool designed to find faults in the Linux kernel.

  • Splint — An open source evolved version of Lint (C language).

List of tools for Static Code Analysis for C (more than the list above)


There is an open source program called Splint:

Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. With minimal effort, Splint can be used as a better lint. If additional effort is invested adding annotations to programs, Splint can perform stronger checking than can be done by any standard lint.


If I remember correctly, that's what lint does.


It's a little off topic, but on the subject of valuable code analyzers for C is valgrind to catch dodgy memory management.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜