code-analysis

Valgrind automatic tests -- are they used somewhere?

Do you think that running set of automatic tests based on valgrind's tool suite makes sense? Did you hear about or see such setup in action? What automatic (free from human intuition) actions could such setup perform? ...

Is there a way to configure the details of MSVS static code analysis?

Static code analysis tool in MSVS (for C++) has plenty of false positives, and some of them are in Windows SDK files. Is there a way to configure it in order to improve quality and ignore stable SDK files? ...

SVN analysis tool

I have been searching all over the net to find something remotely usable. I tried all kinds of HTML based tools for analyzing an SVN repository (commits by users, reports etc) but none of them are user friendly. I am interested in a desktop client (that does NOT depend on an external svn.exe to be installed on my system) that does just ...

How to exclude MFC code from VS2008 Code Analysis

I have a C++/CLI project that uses CWinFormsControl and CWinFormsView to create .NET controls in my MFC views. To do this I need to #include "afxwinforms.h". When I run Code Analysis on the project, I always get warnings about some of the MFC classes I've included. Examples: 3>Running Code Analysis... 3>c:\program files\microsoft visua...

Is there a Delphi library which returns all effective source paths for a project?

For static code analysis tools, it is necessary to know all effective source paths for a given Delphi project, which are defined on project level and in the global IDE configuration. Is there a Delphi library which can collect this kind of project information? As far as I know, the registry settings for the Delphi IDE can be in differ...

Tools for static analysis for C# code

I'm looking for a tool that can collect quality metrics for C#/.NET code. I'm aware of NDepend - are there any other tools that I should look into? Ideally, I'd like to find something that could be integrated with an automated build process - something that could export a text-based report (I'd like to be able to easily email and archive...

Tool for analyzing C++ sources (MSVC)

I need a tool which analyzes C++ sources and says what code isn't used. Size of sources is ~500mb ...

Ignore Code Analysis for SqlMetal generated files

I'm developing a C# project which includes a SqlMetal generated file. I'd like to use Code Analysis. I've turned on "Suppress results from generated code" in the Code Analysis options, but it still reports on the SqlMetal classes. Is there some way to turn this off? I'm using Visual Studio 2008 and SqlMetal 2.0.50727.3082 ...

How to analyze binary file?

I have a binary file. I don't know how it's formatted, I only know it comes from a delphi code. Does it exist any way to analyze a binary file? Does it exist any "pattern" to analyze and deserialize the binary content of a file with unknown format? ...

How can I make sure all my Python code "compiles"?

My background is C and C++. I like Python a lot, but there's one aspect of it (and other interpreted languages I guess) that is really hard to work with when you're used to compiled languages. When I've written something in Python and come to the point where I can run it, there's still no guarantee that no language-specific errors remai...

tool to detect C# code smells

I'm working with C# and I was hoping to find some tools akin to those I'm used to in Ruby and Ruby on Rails for detecting code smells. I'm referring to things like Roodi, Flay, Flog, Reek, Rcov, and Saikuro. It would be nice if the tool(s) integrated with Visual Studio 2008. I have ReSharper and it's nice for alerting me when I'm not ...

Why is code quality not popular?

I like my code being in order, i.e. properly formatted, readable, designed, tested, checked for bugs, etc. In fact I am fanatic about it. (Maybe even more than fanatic...) But in my experience actions helping code quality are hardly implemented. (By code quality I mean the quality of the code you produce day to day. The whole topic of so...

Vb.Net CA1822

I ran a Code Analysis and got this message: Warning 5 CA1822 : Microsoft.Performance : The 'this' parameter (or 'Me' in Visual Basic) of 'MainForm.CheckFileIfFileIsInUse(String)' is never used. Mark the member as static (or Shared in Visual Basic) or use 'this'/'Me' in the method body or at least one property accessor...

Static Analysis tool to detect Internationalization issues

Are there any tools (free/commercial) that can audit an application for internationalization? (or localization-readiness, if you prefer) Primarily interested in: Mulitlingual Implementation tests Examples: * [javascript] alert('Oops wrong choice!'); * [java] String msg = resourcebundle.getString("key.x").concat("4")...

Install code analysis in Vistual Studio 2008 Team System 2008 SP1 without installation media?

Can I install code analysis in VSTS2008 SP1 without the original installation media? Is there a seperate package I can download to activate it? I've installed FxCop 1.36 but that didn't automatically activate the tabs on project properties. I checked if code analysis was installed by going to Add/Remove Programes, selecting Team Syste...

Serializable classes and name refactoring

On my current project, I am using FxCop to work through various code analysis warnings. For the Naming Rules, I have the option to either change names to match the rules or make the decision to keep my current spelling and suppress the warning. In regards to classes or attributes that are marked as [Serializable], I'm interested in the...

Custom C# / .NET Code Analysis

What kind of a tool could examine source or assemblies and tell if StringBuilder was ever used? or if the ObjectDataSource was used? I'm open to source analysis or reflection, but also need to know the right way to do this against Web Applications. UPDATE: I guess I'm looking for a tool that you could insert into a build process that w...

Exiting the Zone of Pain - NDepend

Hi all, I was just running one of my projects through NDepend and the report put my assembly right in the corner of the zone of pain. I was just wondering if it's something that I should be worried about. What does the zone of pain really mean? Doesn't it mean that there is a lot of coupling and things can't change very easily. I...

Visualize compiler warnings

I'm looking for a way to visualize compiler warnings and remarks, by annotating or otherwise showing which lines cause a report. This is much like a modern IDE like NetBeans or Eclipse already does, but I'd like to take output from several compilers (and other static code analysis tools) at once, and create one single annotation in ord...

Static code analyzers for C

Which static code analyzer (if any) do you use? I've been using PyLint for Python and I'm pretty satisfied with it, now I need something similar for C code. How much of it's output do you have to suppress for normal daily usage? ...