[1]姜文,刘立康. C++与Java软件重量级静态检查[J].计算机技术与发展,2016,26(08):17-23.
　JIANG Wen,LIU Li-kang. Heavy-weight Static Checking of Software in C/C++ and Java[J].,2016,26(08):17-23.
点击复制

 C++与Java软件重量级静态检查()
分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:
26
期数:
2016年08期
页码:
17-23
栏目:
智能、算法、系统工程
出版日期:
2016-08-10

文章信息/Info

Title:
 Heavy-weight Static Checking of Software in C/C++ and Java
文章编号:
1673-629X（2016)08-0017-07
作者:
 姜文 ; 刘立康
 西安电子科技大学 通信工程学院
Author(s):
 JIANG Wen; LIU Li-kang
关键词:
 ; Windows操作系统; 静态检查; 持续集成; 安全漏洞
Keywords:
 ; Windows operating system; static checking; continuous integration; security vulnerabilities
分类号:
TP311.56
文献标志码:
A
摘要:
 为了保证Windows环境下C/C++和Java软件产品质量,对C/C++代码和Java代码进行静态检查非常重要。以SVN作为软件配置管理工具,将重量级静态检查工具Coverity和Fortify集成到持续集成工具ICP-CI上,分别对C/C++代码和Java代码进行重量级静态检查。详细叙述了Windows环境下软件配置管理工具SVN客户端安装,SVN版本库的代码更新,对C/C++和Java代码分别进行Coverity和Fortify编译器的配置、编译脚本编写和在ICP-CI任务管理页面上配置检查任务。介绍了静态检查处理过程,分析了出现各种常见问题的原因并提出了相应的解决方案。给出了一个软件产品中C/C++代码模块和Java代码模块的重量级静态检查应用案例。工作实践表明,进行重量级静态检查有助于及时发现并解决C/C++和Java软件源代码的各种缺陷和安全漏洞,从而提高软件产品的质量和安全性。
Abstract:
 In order to ensure the quality of code in language C/C++ and Java based on Windows,it is very important for the static chec-king to code of C/C++and Java. With SVN as configuration management tool,the heavy-weight static checking tools Coverity and For-tify are integrated into continuous integration tool ICP-CI,and static checking is to be done for both C/C++and Java. The SVN client in-stallation and the code updating of the SVN repository under Windows is described in details,and the Coverity and Fortify compiler con-figuration,the compiler scripts writing,and the inspection tasks configuration on ICP-CI task management page are conducted for both C/C++ and Java. The process of the static checking is introduced and the causes of problems are analyzed and the corresponding solutions are given. Finally the heavy-weight static checking applied in a case for both modules of code in C/C++and Java in software product is introduced. Practice shows that the static checking is helpful to discover and solve all kinds of flaws of the code in C/C++and Java time-ly,improving quality and safety for software.

相似文献/References:

[1]王玉忠 陈新 蔡光东 许金森 胡翔龙.基于Windows平台的皮肤阻抗检测系统设计[J].计算机技术与发展,2008,(03):192.
　WANG Yu-zhong,CHEN Xin,CAI Guang-dong,et al.Design of Skin Impedance Measurement System Based on Windows Operation System[J].,2008,(08):192.
[2]许斌龙,张晶,王国明.Win32环境下的多线程同步技术的研究[J].计算机技术与发展,2013,(12):26.
　XU Bin-long,ZHANG Jing,WANG Guo-ming.Study on Synchronization Technology of Multi-thread in Win32 Environment[J].,2013,(08):26.
[3]张志宏,吴庆波,邵立松,等.基于飞腾平台TOE协议栈的设计与实现[J].计算机技术与发展,2014,24(07):1.
　ZHANG Zhi-hong,WU Qing-bo,SHAO Li-song,et al. Design and Implementation of TCP/IP Offload Engine Protocol Stack Based on FT Platform[J].,2014,24(08):1.
[4]梁文快,李毅. 改进的基因表达算法对航班优化排序问题研究[J].计算机技术与发展,2014,24(07):5.
　LIANG Wen-kuai,LI Yi. Research on Optimization of Flight Scheduling Problem Based on Improved Gene Expression Algorithm[J].,2014,24(08):5.
[5]黄静,王枫,谢志新,等. EAST文档管理系统的设计与实现[J].计算机技术与发展,2014,24(07):13.
　HUANG Jing,WANG Feng,XIE Zhi-xin,et al. Design and Implementation of EAST Document Management System[J].,2014,24(08):13.
[6]侯善江[],张代远[][][]. 基于样条权函数神经网络P2P流量识别方法[J].计算机技术与发展,2014,24(07):21.
　HOU Shan-jiang[],ZHANG Dai-yuan[][][]. P2P Traffic Identification Based on Spline Weight Function Neural Network[J].,2014,24(08):21.
[7]李璨,耿国华,李康,等. 一种基于三维模型的文物碎片线图生成方法[J].计算机技术与发展,2014,24(07):25.
　LI Can,GENG Guo-hua,LI Kang,et al. A Method of Obtaining Cultural Debris’ s Line Chart Based on Three-dimensional Model[J].,2014,24(08):25.
[8]翁鹤,皮德常. 混沌RBF神经网络异常检测算法[J].计算机技术与发展,2014,24(07):29.
　WENG He,PI De-chang. Chaotic RBF Neural Network Anomaly Detection Algorithm[J].,2014,24(08):29.
[9]刘茜[],荆晓远[],李文倩[],等. 基于流形学习的正交稀疏保留投影[J].计算机技术与发展,2014,24(07):34.
　LIU Qian[],JING Xiao-yuan[,LI Wen-qian[],et al. Orthogonal Sparsity Preserving Projections Based on Manifold Learning[J].,2014,24(08):34.
[10]尚福华,李想,巩淼. 基于模糊框架-产生式知识表示及推理研究[J].计算机技术与发展,2014,24(07):38.
　SHANG Fu-hua,LI Xiang,GONG Miao. Research on Knowledge Representation and Inference Based on Fuzzy Framework-production[J].,2014,24(08):38.

更新日期/Last Update: 2016-09-29