Implement Of A C Language Code Defect Detection Tool-Cql

With the development of computer technology and applications, softwares are widely used and play an important role in a lot of fields such as aerospace, transportation control systems and e-commerce. Thus, the software reliability is highly required. The scale and complexity of softwares today is also increasing, which leads to that the artificial walkthroughs of the code defect is not just highly consuming but maybe impractical. Thus, an automated and rule-customizable defect detection tool will possess a high practical value instead of doing walkthroughs.In this paper, automated and rule-customizable code defect detection tools are extensively studied,the main contents of which include:Firstly, with lexical parsing techniques, a automated static code defect detection tool (GJB5369) is developed, which is based on programming specifications GJB5369-2005; On this basis, a rule-customizable code defect detection tool, C Query Language (CQL), is developed, of which the key technology is utilizing JavaCC to define CQL grammar and customizable detection rules by analyzing the nodes of the syntax tree can be. Finally, the code defect detection of the opensource C projects such as GAP and Memfile are carried out. And the results are compared with the commercial static code detection tools Klocwork to verify the self-developed one’s reliabilty.