| The use of artificial to the software code detection has been the main way of software testing. But along with the increasing scale of software code, fully using human to detect software has becoming increasingly powerless. In this context, experts in the fields of computer have developed a lot of different software testing technology. In the software testing technology, without running the program, static code detection technology can find defects in software source code, and has the advantages of quick analysis speed, high degree of automation. If we can achieve a detection tool based on static code detection technology, it will greatly reduce the cost of software development, and improve the efficiency of software development. The objective of this thesis is the realization of a static code detection tool which is based on the GJB5369-2005programming specification。In the process of realization of the static code detecting tool, the mainly works are carried out as follows.(1)Through the analysis of the grammatical rules of C language, realize the design of the abstract syntax tree to package C language file information.(2)Through the study of lexical analyzer generator tool JLEX and parser generation tool JCUP, complete the realization of lexical analyzer and grammar analyzer which based on the rules of C language grammar.(3)Through the learning and use of the existing static code analysis technology, realized the detection logic of GJB5369-2005C language programming code specification.(4) By using the some framework(ExtJs, Spring, Hibernate,) to realize the static code detecting tool.It is show that static code detection tool of commercial is not better than static code detection tool of GJB5369by comparative analysis, whether it is false positive rate and false negative rate, or precision and speed. In the detection of some rules, GJB5369static code detection tool is better than the commercial static code detection tool. |
PDF Full Text Request