Stanse
[Posted October 13, 2009 by corbet]
Static analysis tools can bring great value to the development process;
they often find bugs which escape review and which, potentially, can live
in the code base for years. Linux has benefited from bug reports from
Coverity's tools, but those tools are proprietary. Unfortunately, free
static analysis tools have always lagged the proprietary alternatives.
That won't change overnight, but there is a new contender on the block in
the form of Stanse; the 1.0 version
was recently announced on the
kernel mailing list. Specific problems that Stanse can test for include
locking errors, memory leaks, failure to check for memory allocation
failures, non-atomic operations in atomic context, and some reference
counting errors. A list of
kernel bugs found by Stanse has been posted.
Clearly, it would be nice to extend Stanse with more tests. Many kernel
developers may balk at doing that, though; Stanse is a Java application,
and checker rules must be written in XML. That limits rule additions to
those who are both familiar with kernel code and able to work in a Java/XML
environment.
(
Log in to post comments)