Confirmed users, Bureaucrats and Sysops emeriti
419
edits
Static Analysis: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
Applications for oink static analysis tools | Applications for [http://www.cubewano.org/oink/ Oink] static analysis tools for [[Mozilla 2]]: | ||
* Develop the AST-pattern-matching [http://weblogs.mozillazine.org/roadmap/archives/2006/11/oinkbased_patch_generation.html patch generation] tool. | * Develop the AST-pattern-matching [http://weblogs.mozillazine.org/roadmap/archives/2006/11/oinkbased_patch_generation.html patch generation] tool. | ||
| Line 8: | Line 8: | ||
* Generate patches to convert from nsresults to C++ exceptions. | * Generate patches to convert from nsresults to C++ exceptions. | ||
* Identify C++ to convert to JS2... | * Identify C++ to convert to JS2... | ||
** ... and translate it automatically. | |||
** C++ candidate code uses only scriptable interfaces, strings, primitives. | |||
* Replace XPCOM or NSPR portability with std-C++ equivalents. | * Replace XPCOM or NSPR portability with std-C++ equivalents. | ||
* Enforce confidentiality properties: | * Enforce confidentiality properties: | ||
** Chrome never evals a content-tainted string. | |||
** C++ never snprintfs using a content-tained string. | |||
* Enforce correct API usage: | * Enforce correct API usage: | ||
** Exact-GC safety bugs. | |||
** String character set encoding mistakes. | |||
** Unit (twips vs. pixels) checking for layout. | |||
* Measure code complexity: | * Measure code complexity: | ||
** Virtual method declaration and call populations. | |||
** Cohesion, coupling, other modularity measures. | |||
** Compare to other open source projects of similar scope. | |||