Static code analysis is the one thing that not only can make your coding life more pleasant but help the business to build more robust processes as well. https://levelup.gitconnected.com/why-you-need-static-code-analysis-a053c8578fc4
Medium
Why You Need Static Code Analysis
Maintenance Is the Key
Episode 267 of CppCast was recorded on September 30th, 2020. Hosts Rob Irving and Jason Turner talked to Emery Berger, a Professor in the College of Information and Computer Science at the University of Massachusetts Amherst. They discussed New C++ features in GCC 10 and Pattern Matching from September C++ ISO Mailing. They talked about performance issues in C++ and garbage collectors' usage. They also chat about DieHard, an error-resistant memory allocator; Stabilizer, a compiler transformation and runtime library for dynamic memory layout randomization and Coz, a new kind of profiler.
https://pvs-studio.com/en/blog/posts/cpp/0825/
https://pvs-studio.com/en/blog/posts/cpp/0825/
Pvs-Studio
Text Broadcast of CppCast 267: Performance Matters
Episode 267 of CppCast was recorded on September 30th, 2020. Hosts Rob Irving and Jason Turner talked to Emery Berger, a Professor in the College of Information and Computer Science at the …
Rob and Jason are joined by Marshall Clow. They first discuss some bugs Microsoft found using ASAN in open source projects, and new libraries. Then they talk to Marshall Clow, longtime maintainer of libc++, on his perspective on the C++ ABI, and why stability is important. https://cppcast.com/abi-stability/
Text Broadcast of CppCast 278: SerenityOS https://pvs-studio.com/en/blog/posts/cpp/0828/
Pvs-Studio
Text Broadcast of CppCast 278: SerenityOS
Episode 278 of CppCast is an inspiring story how guest Andreas Kling overcame his drug addiction by creating and developing a new open-source operating system in C++. He named it after the …
PVS-Studio 7.13: SQL Injections, Blame Notifier, .NET 5 https://pvs-studio.com/en/blog/posts/0829/
Pvs-Studio
PVS-Studio 7.13: SQL Injections, Blame Notifier, .NET 5
The newest PVS-Studio static analyzer version will please you with these features: tainted data analysis, .NET 5 support. The Blame Notifier utility can now sort warnings by commit date.
PVS-Studio Team: Switching to Clang Improved PVS-Studio C++ Analyzer's Performance https://pvs-studio.com/en/blog/posts/cpp/0830/
PVS-Studio
PVS-Studio team: switching to Clang improved PVS-Studio C++ anal…
From the earliest days, we used MSVC to compile the PVS-Studio C++ analyzer for Windows - then, in 2006, known as Viva64, version 1.00. With new releases, the analyzer's C++ core learned to…
OWASP, Vulnerabilities, and Taint Analysis in PVS-Studio for C#. Stir, but Don't Shake https://pvs-studio.com/en/blog/posts/csharp/0831/
Pvs-Studio
OWASP, Vulnerabilities, and Taint Analysis in PVS-Studio for C#.…
We continue to develop PVS-Studio as a SAST solution. Thus, one of our major goals is expanding OWASP coverage. You might ask, what's the use when there's no taint analysis? That's exactly …
The ?. Operator in foreach Will Not Protect From NullReferenceException https://pvs-studio.com/en/blog/posts/csharp/0832/
PVS-Studio
The ?. operator in foreach will not protect from NullReferenceEx…
Do you like the ?. operator? Well, who doesn′t? Many people like these concise null checks. However, today′s article shows that the ?. operator may be tricky sometimes. That is, it can crea…
Rob and Jason are joined by Dana Rochman and Amir Kirsh from Incredibuild. They first discuss conference news and a blog post from Andreas Kling. Then they talk to Dana and Amir about the latest from Incredibuild, including new support for accelerating builds in the cloud, and build caching. https://cppcast.com/incredibuild-cloud/
Unity Projects Analysis: The solution file has two projects named "UnityEngine.UI" https://pvs-studio.com/en/blog/posts/csharp/0834/
Pvs-Studio
Unity Projects Analysis: The solution file has two projects name…
While PVS-Studio analyses a Unity project, one may stumble upon such an error: Error was encountered while trying to open solution file '...': The solution file has two projects named Unity…
Why You Should Check Values of Public Methods' Parameters https://pvs-studio.com/en/blog/posts/csharp/0835/
Pvs-Studio
Why You Should Check Values of Public Methods
This note will answer the question - why PVS-Studio considers parameters of public methods potential sources of tainted data. The analyzer can issue warnings if such parameters haven't been…
.NET Application Optimization: Simple Edits Speeded Up PVS-Studio and Reduced Memory Consumption by 70% https://pvs-studio.com/en/blog/posts/csharp/0836/
PVS-Studio
.NET application optimization: simple edits speeded up PVS-Studio and reduced memory consumption by 70%
We know many ways to detect performance problems, such as extremely low speed and high memory consumption. Usually tests, developers, or testers detect such applications′ drawbacks. In the worst...
Rob and Jason are joined by Darrell Wright. They first talk about a gameboy emulator written by Ben Smith and a new regression testing tool. Then they talk to Darrell Wright about DAW JSON Link, his JSON serialization library. https://cppcast.com/daw-json-link/
How WCF Shoots Itself in the Foot With TraceSource https://pvs-studio.com/en/blog/posts/csharp/0837/
Pvs-Studio
How WCF Shoots Itself in the Foot With TraceSource
We don't often get the chance to write something on parallel programming issues. This time we got lucky. The TraceEvent standard method has some implementation peculiarities. They resulted …
Rob and Jason are joined by Patryk Obara. They first talk about in Visual Studio 2019 and a Trip Report from Herb Sutter on the Summer ISO meeting. Then they talk to Patryk Obara about the dosbox project itself and the dosbox staging repository where he’s been working to modernize dosbox. https://cppcast.com/dosbox/
C++ is a wonderful language to use. It becomes even more wonderful if you're looking at it from the other side of the fence. Parsing and compiling C++ code is far from trivial. We'll take a look at possible representations of types inside a program which does just that. For that, we'll look at the PVS-Studio C++ analyzer's internal mechanisms that deal with types. The current implementation is somewhat questionable, so, it is being redone. I'll give you an idea of how it currently works and how it will be working. We'll also take a look at some implementation details of the new type system. https://www.youtube.com/watch?v=qwnJWPuLNwo
YouTube
itCppCon21 - Inside a static analyzer: type system (Yuri Minaev)
Event page: https://italiancpp.org/itcppcon21
Slides: https://github.com/italiancpp/itcppcon21
---
C++ is a wonderful language to use. It becomes even more wonderful if you're looking at it from the other side of the fence. Parsing and compiling C++ code…
Slides: https://github.com/italiancpp/itcppcon21
---
C++ is a wonderful language to use. It becomes even more wonderful if you're looking at it from the other side of the fence. Parsing and compiling C++ code…