static code analysis

梦里梦外; 2022-09-21 04:51 133阅读 0赞

# [static code analysi*s*][static code analysi_s] #

**http://docs.oclint.org/en/dev/intro/tutorial.html (oclint) for objective-c**

From Wikipedia, the free encyclopedia

Jump to: [navigation][], [search][]

This is a list of tools for [static code analysis][].

<table style="color:rgb(51,51,51); font-family:Arial; font-size:14px; line-height:26px; text-align:left"> 
 <tbody> 
 <tr> 
 <td> 
 <div> 
 <h2 style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; padding-top:0px; padding-right:0px; padding-bottom:0px; padding-left:0px"> <a rel="nofollow"></a><a style="color:rgb(51,102,153)" rel="nofollow"></a>Contents</h2> 
 </div> 
 <ul> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Historical" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">1&nbsp;Historical</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#By_language" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2&nbsp;By language</a> 
 <ul> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Multi-language" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.1&nbsp;Multi-language</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#.NET" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.2&nbsp;.NET</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#ActionScript" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.3&nbsp;ActionScript</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Ada" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.4&nbsp;Ada</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#C.2FC.2B.2B" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.5&nbsp;C/C++</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Java" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.6&nbsp;Java</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#JavaScript" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.7&nbsp;JavaScript</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Objective-C" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.8&nbsp;Objective-C</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Perl" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.9&nbsp;Perl</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Python" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">2.10&nbsp;Python</a></li> 
 </ul> </li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#Formal_methods_tools" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">3&nbsp;Formal methods tools</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#See_also" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">4&nbsp;See also</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#References" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">5&nbsp;References</a></li> 
 <li><a href="http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#External_links" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">6&nbsp;External links</a></li> 
 </ul> </td> 
 </tr> 
 </tbody> 
</table>

## Historical ##

*  [Lint][] — The original static code analyzer of [C code][].

## By language ##

### Multi-language ###

*  [Axivion Bauhaus Suite][] — A tool for Ada, C, C++, C\#, and Java code that comprises various analyses such as architecture checking, interface analyses, and clone detection.
 *  [Black Duck Suite][] — Analyze the composition of software source code and binary files, search for reusable code, manage [open source][] and third-party code approval, honor the legal obligations associated with mixed-origin code, and monitor related security vulnerabilities.
 *  [BugScout][] — Detects security flaws in Java, PHP, ASP and C\# web applications.
 *  [CAST Application Intelligence Platform][] — Detailed, audience-specific dashboards to measure quality and productivity. 30+ languages, C/C++, Java, .NET, Oracle, PeopleSoft, SAP, Siebel, Spring, Struts, Hibernate and all major databases.
 *  [ChecKing][] — Integrated software quality portal that allows manage the quality of all phases of software development. It includes static code analyzers for Java, JSP, Javascript, HTML, XML, .NET (C\#, ASP.NET, VB.NET, etc.), PL/SQL, embedded SQL, SAP ABAP IV, Natural/Adabas, C/C++, Cobol, JCL, PowerBuilder.
 *  [Coverity SAVE][] — Coverity® Static Analysis Verification Engine (Coverity SAVE™) is a static code analysis tool for C, C++, C\# and Java source code. Coverity commercialized a research tool for finding bugs through static analysis, the Stanford Checker, which used abstract interpretation to identify defects in source code.
 *  [DMS Software Reengineering Toolkit][] — Supports custom analysis of C, C++, C\#, Java, COBOL, PHP, VisualBasic and many other languages. Also COTS tools for clone analysis, dead code analysis, and style checking.
 *  [HP Fortify Source Code Analyzer][] — Helps developers identify software security vulnerabilities in C/C++, Java, JSP, .NET, ASP.NET, ColdFusion, classic ASP, PHP, Visual Basic 6, VBScript, JavaScript, PL/SQL, T-SQL, Python and COBOL and configuration files.
 *  [IBM Rational AppScan Source Edition][] — Analyzes source code to identify security vulnerabilities while integrating security testing with software development processes and systems. Supports C/C++, .NET, Java, JSP, JavaScript, ColdFusion, Classic ASP, PHP, Perl, VisualBasic 6, PL/SQL, T-SQL, and COBOL
 *  [Imagix 4D][] — Identifies problems in variable use, task interaction and concurrency, especially in embedded applications, as part of an overall system for understanding, improving and documenting C, C++ and Java code.
 *  [JustCode][] — [Visual Studio][] code analysis and refactoring productivity tool by Telerik for C\#, VB.NET, XAML, ASP.NET, JavaScript, HTML, XML, CSS, Razor, WinRT and Metro apps
 *  [LDRA Testbed][] — A software analysis and testing tool suite for C, C++, Ada83, Ada95 and Assembler (Intel, Freescale, Texas Instruments).
 *  [MALPAS][]; A software static analysis toolset for a variety of languages including Ada, C, Pascal and Assembler (Intel, PowerPC and Motorola). Used primarily for safety critical applications in Nuclear and Aerospace industries.
 *  [McCabe IQ][] — static and dynamic analysis tool for Ada, ASM86, C, C\#, C++.NET, C++, COBOL, FORTRAN, JAVA, JSP, Perl, PL1, VB and VB.NET. It objectively measures software quality through advanced static analysis and visualizes the architecture, using interactive, visual environment to highligh the most complex areas of the code base to identify bugs and security vulnerabilities.
 *  [Moose][] — Moose started as a software analysis platform with many tools to manipulate, assess or visualize software. It can evolve to a more generic data analysis platform. Supported languages are C/C++, Java, Smalltalk, .NET, more may be added.
 *  [Copy/Paste Detector (CPD)][Copy_Paste Detector _CPD] — [PMDs][] [duplicate code][] detection for (e.g.) [Java][], [JSP][], [C][C code], [C++][C], [ColdFusion][],[PHP][] and [JavaScript][][\[1\]][1] code.
 *  [Polyspace][] — Uses [abstract interpretation][] to detect and prove the absence of certain [run time errors][] in[source code][] for C, C++, and Ada
 *  [Protecode][] — Analyzes the composition of software source code and binary files, searches for open source and third party code and their associated licensing obligations. Can also detect secuity vulnerabilities.
 *  [ResourceMiner][] — Architecture down to details multipurpose analysis and metrics, develop own rules for masschange and generator development. Supports 30+ legacy and modern languages and all major databases.
 *  [Semmle][] \- supports Java, C, C++, C\#.
 *  [SofCheck Inspector][] — Static detection of logic errors, [race conditions][], and redundant code for [Ada][] and[Java][]; automatically extracts [pre][]/[postconditions][] from code.
 *  [Sonar][] — A continuous inspection engine to manage the technical debt: unit tests, complexity, duplication, design, comments, coding standards and potential problems. Supports languages: ABAP, C, Cobol, C\#, Flex, Forms, Groovy, Java, JavaScript, Natural, PHP, PL/SQL, Visual Basic 6, Web, XML, Python.
 *  [Sotoarc/Sotograph][Sotoarc_Sotograph] — Architecture and quality in-depth analysis and monitoring for C, C++, C\#, Java
 *  [Understand][] — Analyzes Ada, C, C++, C\#, COBOL, CSS, Delphi, Fortran, HTML, Java, JavaScript, Jovial, Pascal, PHP, PL/M, Python, VHDL, and XML — reverse engineering of source, code navigation, and metrics tool.
 *  [VCG][] \- Free tool that locates security flaws in C++, Java and PL/SQL and gives pie chart breakdown of code/whitespace/comments/etc. Configuration files allow for additional searches for dangerous functions to be specified and options settings allow user to specify which levels of severity of vulnerabilities to search for.
 *  [Veracode][] — Finds security flaws in application binaries and bytecode without requiring source. Supported languages include C, C++, .NET (C\#, [C++/CLI][C_CLI], VB.NET, ASP.NET), Java, JSP, [ColdFusion][],[PHP][], [Ruby on Rails][], and [Objective-C][], including mobile applications on the [Windows Mobile][], [BlackBerry][],[Android][], and [iOS][] platforms.
 *  [Visual Studio Team System][] — Analyzes C++, C\# source codes. only available in team suite and development edition.
 *  [Yasca][] — Yet Another Source Code Analyzer, a plugin-based framework to scan arbitrary file types, with plugins for C/C++, Java, JavaScript, ASP, PHP, HTML/CSS, ColdFusion, [COBOL][], and other file types. It integrates with other scanners, including [FindBugs][], [PMD][PMDs], and Pixy.

### [.NET][] ###

*  [CodeIt.Right][] — Combines static code analysis and automatic refactoring to best practices which allows automatically correct code errors and violations; supports C\# and VB.NET.
 *  [CodeRush][] — A plugin for [Visual Studio][], it addresses a multitude of shortcomings with the popular IDE. Including alerting users to violations of best practices by using static code analysis.
 *  [FxCop][] — Free static analysis for Microsoft .NET programs that compile to [CIL][]. Standalone and integrated in some [Microsoft Visual Studio][] editions; by Microsoft.
 *  [JustCode][] — Add-on for [Visual Studio][] 2005/2008/2010 by Telerik for real-time, system-wide code analysis for C\#, VB.NET, ASP.NET, XAML, JavaScript, HTML, Razor, CSS and multi-language systems.
 *  [Kalistick][] — Mixing from the Cloud: static code analysis with best practice tips and collaborative tools for Agile teams.
 *  [NDepend][] — Simplifies managing a complex .NET code base by analyzing and visualizing code dependencies, by defining design rules, by doing impact analysis, and by comparing different versions of the code. Integrates into [Visual Studio][].
 *  [Parasoft dotTEST][] — A static analysis, unit testing, and code review plugin for [Visual Studio][]; works with languages for Microsoft .NET Framework and .NET Compact Framework, including C\#, VB.NET, ASP.NET and Managed C++.
 *  [ReSharper][] — Plug-in to Visual Studio 2003/2005/2008/2010/2012 from the creators of [IntelliJ IDEA][], which executes over 1300 real-time static code inspections of C\#, VB.NET, ASP.NET, ASP.NET MVC, JavaScript, XAML, XML, CSS, and HTML code.
 *  [StyleCop][] — Analyzes C\# source code to enforce a set of style and consistency rules. It can be run from inside of [Microsoft Visual Studio][] or integrated into an [MSBuild][] project. Free download from Microsoft.

### [ActionScript][] ###

*  [Apparat][] — A language manipulation and optimization framework consisting of intermediate representations for ActionScript.

### [Ada][] ###

*  [AdaControl][] \- A tool to control occurrences of various entities or programming patterns in Ada code, used for checking coding standards, enforcement of safety related rules, and support for various manual inspections.
 *  [Fluctuat][] — [Abstract interpreter][abstract interpretation] for the validation of numerical properties of programs.
 *  [LDRA Testbed][] — A software analysis and testing tool suite for Ada83/95.
 *  [Polyspace][] — Uses [abstract interpretation][] to detect and prove the absence of certain [run time errors][] in[source code][]
 *  [SofCheck Inspector][] — Static detection of logic errors, [race conditions][], and redundant code for Ada; automatically extracts [pre][]/[postconditions][] from code.

### [C][C code]/[C++][C] ###

*  [Astrée][Astr_e]; exhaustive search for runtime errors and assertion violations by [abstract interpretation][]; tailored towards critical code (avionics)
 *  [BLAST][] — (Berkeley Lazy Abstraction Software verification Tool) — A software model checker for C programs based on lazy abstraction.
 *  [Cppcheck][] — Open-source tool that checks for several types of errors, including use of [STL][].
 *  [cpplint][] \- An open-source tool that checks for compliance with Google's style guide for C++ coding
 *  [Clang][] — A compiler that includes a static analyzer.
 *  [Coccinelle][] — Source code pattern matching and transformation
 *  [ECLAIR][] — A platform for the automatic analysis, verification, testing and transformation of C and C++ programs.
 *  [Eclipse (software)][Eclipse _software] — An IDE that includes a static code analyzer ([CODAN][]).
 *  [Fluctuat][] — [Abstract interpreter][abstract interpretation] for the validation of numerical properties of programs.
 *  [Frama-C][] — A static analysis framework for C.
 *  [Goanna][] — A software analysis tool for C/C++.
 *  [Lint][] — The original static code analyzer for C.
 *  [LDRA Testbed][] — A software analysis and testing tool suite for C/C++.
 *  [Parasoft C/C++test][Parasoft dotTEST]— A C/C++ tool that does static analysis, unit testing, code review, and runtime error detection; plugins available for [Visual Studio][] and [Eclipse][Eclipse _software]\-based IDEs.
 *  [PC-Lint][] — A software analysis tool for C/C++.
 *  [Polyspace][] — Uses [abstract interpretation][] to detect and prove the absence of certain [run time errors][] in[source code][]
 *  [PVS-Studio][] — A software analysis tool for C/C++/.
 *  [QA-C][] (and QA-C++) — Deep static analysis of C/C++ for quality assurance and guideline enforcement.
 *  [SLAM project][] — a project of [Microsoft Research][] for checking that software satisfies critical behavioral properties of the interfaces it uses.
 *  [Sparse][] — A tool designed to find faults in the [Linux][] kernel.
 *  [Splint][] — An open source evolved version of Lint, for C.

### [Java][] ###

*  [AgileJ StructureViews][] — Reverse engineered Java class diagrams with an emphasis on filtering
 *  [Checkstyle][] — Besides some static code analysis, it can be used to show violations of a configured coding standard.
 *  [FindBugs][] — An open-source static bytecode analyzer for Java (based on [Jakarta][] [BCEL][]) from the University of Maryland.
 *  [Hammurapi][] — Versatile code review program; free for non-commercial use.
 *  [PMD][PMDs] — A static ruleset based Java source code analyzer that identifies potential problems.
 *  [Soot][] — A language manipulation and optimization framework consisting of intermediate languages for Java.
 *  [Squale][] — A platform to manage software quality (also available for other languages, using commercial analysis tools though).
 *  [Jtest][] — Testing and static code analysis product by [Parasoft][Parasoft dotTEST].
 *  [LDRA Testbed][] — A software analysis and testing tool suite for Java.
 *  [SemmleCode][] — Object oriented code queries for static program analysis.
 *  [SonarJ][] — Monitors conformance of code to intended architecture, also computes a wide range of software metrics.
 *  [Kalistick][] — A Cloud-based platform to manage and optimize code quality for Agile teams with DevOps spirit

### [JavaScript][] ###

*  [Closure Compiler][] — JavaScript optimizer that rewrites code to be faster and smaller, and checks use of native JavaScript functions.
 *  [JSLint][] — JavaScript [syntax checker][] and validator.
 *  [JSHint][] — A community driven fork of JSLint.

### [Objective-C][] ###

*  [Clang][] — The free Clang project includes a static analyzer. As of version 3.2, this analyzer is included in[Xcode][].[\[2\]][2]
 *  [OCLint][] — A static code analysis tool for improving quality and reducing defects by inspecting Objective-C/C++/C code.

### [Perl][] ###

*  [Perl::Critic][Perl_Critic] \- A tool to help enforce common best practices for programming in Perl. Most best practices are based on [Damian Conway][]'s [Perl Best Practices][] book.
 *  [PerlTidy][] \- Program that act as a [syntax checker][] and tester/enforcer for coding practices in Perl.
 *  [Padre][] \- An IDE for Perl that also provides static code analysis to check for common beginner errors.

### [Python][] ###

*  [Pychecker][] — A source code checking tool.
 *  [Pylint][] — Static code analyzer.

## Formal methods tools ##

Tools that use a [formal methods][] approach to static analysis (e.g., using static [program assertions][]):

*  [ECLAIR][] — Uses [formal methods][]\-based static code analysis techniques such as [abstract interpretation][]and [model checking][] combined with [constraint satisfaction][] techniques to detect or prove the absence of certain [run time errors][] in [source code][].
 *  [ESC/Java][ESC_Java] and [ESC/Java2][ESC_Java2] — Based on [Java Modeling Language][], an enriched version of Java.
 *  [MALPAS][]; A formal methods tool that uses [directed graphs][] and [regular algebra][] to prove that software under analysis correctly meets its mathematical specification.
 *  [Polyspace][] — Uses [abstract interpretation][], a formal methods based technique,[\[3\]][3] to detect and prove the absence of certain [run time errors][] in [source code][] for C/C++, and Ada
 *  [SofCheck Inspector][] — Statically determines and documents [pre][]\- and [postconditions][] for [Java][] methods; statically checks [preconditions][pre] at all call sites; also supports [Ada][].
 *  [SPARK Toolset][] including the [SPARK Examiner][] — Based on the [SPARK][] language, a subset of [Ada][].

## See also ##

<table style="background-color:rgb(249,249,249); font-size:12px; line-height:13px; max-width:175px"> 
 <tbody> 
 <tr> 
 <td style="text-align:center"><a href="http://en.wikipedia.org/wiki/File:Portal-puzzle.svg" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow"><img alt="Portal icon" src="http://upload.wikimedia.org/wikipedia/en/thumb/f/fd/Portal-puzzle.svg/32px-Portal-puzzle.svg.png" height="28" width="32" style="border-top-style:none; border-right-style:none; border-bottom-style:none; border-left-style:none; border-width:initial; border-color:initial"></a></td> 
 <td style="padding-top:0px; padding-right:0.2em; padding-bottom:0px; padding-left:0.2em; vertical-align:middle; font-style:italic; font-weight:bold"> <a href="http://en.wikipedia.org/wiki/Portal:Software_Testing" title="Portal:Software Testing" style="color:rgb(51,102,153); text-decoration:none" rel="nofollow">Software Testing portal</a></td> 
 </tr> 
 </tbody> 
</table>

*  [Automated code review][]
 *  [Best Coding Practices][]
 *  [Dynamic code analysis][]
 *  [Software metrics][]
 *  [Integrated development environment][] (IDE) and [Comparison of integrated development environments][]. IDEs will usually come with built-in support for static code analysis, or with an option to integrate such support. [Eclipse][Eclipse _software] offers such integration mechanism for most different types of extensions (plug-ins).

## References ##

1.  **[^][Link 1]** ["PMD - Browse /pmd/5.0.0 at SourceForge.net"][PMD - Browse _pmd_5.0.0 at SourceForge.net]. Retrieved Sun Dec 09 2012.
2.  **[^][Link 2]** ["Static Analysis in Xcode"][Static Analysis in Xcode]. Apple. Retrieved 2009-09-03.
3.  **[^][Link 3]** Cousot, Patrick (2007). ["The Role of Abstract Interpretation in Formal Methods"][The Role of Abstract Interpretation in Formal Methods]. IEEE International Conference on Software Engineering and Formal Methods. Retrieved 2010-11-08.

## External links ##

*  [Java Static Checkers][] at the [Open Directory Project][]
 *  [List of Java static code analysis plugins for Eclipse][]
 *  [List of static source code analysis tools for C][]
 *  [List of static source code analysis tools][] at [CERT][]
 *  [SAMATE-Source Code Security Analyzers][]
 *  [SATE - Static Analysis Tool Exposition][]
 *  [“A Comparison of Bug Finding Tools for Java”][A Comparison of Bug Finding Tools for Java], by Nick Rutar, Christian Almazan, and Jeff Foster,[University of Maryland][]. Compares Bandera, [ESC/Java][ESC_Java] 2, [FindBugs][], [JLint][], and PMD.
 *  [“Mini-review of Java Bug Finders”][Mini-review of Java Bug Finders], by Rick Jelliffe, [O'Reilly Media][O_Reilly Media].
 *  [Parallel Lint][], by Andrey Karpov
 *  [Integrate static analysis into a software development process][] Explains how one goes about integrating static analysis into a software development process

[static code analysi_s]: http://blog.csdn.net/fhbystudy/article/details/8888542
[navigation]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#mw-head
[search]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#p-search
[static code analysis]: http://en.wikipedia.org/wiki/Static_code_analysis
[Lint]: http://en.wikipedia.org/wiki/Lint_%28software%29
[C code]: http://en.wikipedia.org/wiki/C_%28programming_language%29
[Axivion Bauhaus Suite]: http://en.wikipedia.org/wiki/Axivion_Bauhaus_Suite
[Black Duck Suite]: http://en.wikipedia.org/wiki/Black_Duck_Software
[open source]: http://en.wikipedia.org/wiki/Open_source
[BugScout]: http://en.wikipedia.org/wiki/Buguroo_Offensive_Security#bugScout
[CAST Application Intelligence Platform]: http://en.wikipedia.org/wiki/CAST_Application_Intelligence_Platform
[ChecKing]: http://en.wikipedia.org/wiki/ChecKing
[Coverity SAVE]: http://en.wikipedia.org/wiki/Coverity#Technologies
[DMS Software Reengineering Toolkit]: http://en.wikipedia.org/wiki/DMS_Software_Reengineering_Toolkit
[HP Fortify Source Code Analyzer]: http://en.wikipedia.org/wiki/Fortify_Software
[IBM Rational AppScan Source Edition]: http://en.wikipedia.org/wiki/IBM_Rational_AppScan
[Imagix 4D]: http://en.wikipedia.org/wiki/Imagix_4D
[JustCode]: http://en.wikipedia.org/wiki/JustCode
[Visual Studio]: http://en.wikipedia.org/wiki/Visual_Studio
[LDRA Testbed]: http://en.wikipedia.org/wiki/LDRA_Testbed
[MALPAS]: http://en.wikipedia.org/wiki/MALPAS_Software_Static_Analysis_Toolset
[McCabe IQ]: http://www.mccabe.com/iq.htm
[Moose]: http://en.wikipedia.org/wiki/Moose_%28analysis%29
[Copy_Paste Detector _CPD]: http://en.wikipedia.org/wiki/PMD_%28software%29#Copy.2FPaste_Detector_.28CPD.29
[PMDs]: http://en.wikipedia.org/wiki/PMD_%28software%29
[duplicate code]: http://en.wikipedia.org/wiki/Duplicate_code
[Java]: http://en.wikipedia.org/wiki/Java_%28programming_language%29
[JSP]: http://en.wikipedia.org/wiki/JavaServer_Pages
[C]: http://en.wikipedia.org/wiki/C%2B%2B
[ColdFusion]: http://en.wikipedia.org/wiki/ColdFusion
[PHP]: http://en.wikipedia.org/wiki/PHP
[JavaScript]: http://en.wikipedia.org/wiki/JavaScript
[1]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_note-1
[Polyspace]: http://en.wikipedia.org/wiki/Polyspace
[abstract interpretation]: http://en.wikipedia.org/wiki/Abstract_interpretation
[run time errors]: http://en.wikipedia.org/wiki/Run_time_%28program_lifecycle_phase%29
[source code]: http://en.wikipedia.org/wiki/Source_code
[Protecode]: http://en.wikipedia.org/wiki/Protecode
[ResourceMiner]: http://en.wikipedia.org/wiki/ResourceMiner
[Semmle]: http://en.wikipedia.org/wiki/Semmle
[SofCheck Inspector]: http://en.wikipedia.org/wiki/SofCheck_Inspector
[race conditions]: http://en.wikipedia.org/wiki/Race_condition
[Ada]: http://en.wikipedia.org/wiki/Ada_%28programming_language%29
[pre]: http://en.wikipedia.org/wiki/Precondition
[postconditions]: http://en.wikipedia.org/wiki/Postcondition
[Sonar]: http://en.wikipedia.org/wiki/Sonar_%28software_quality%29
[Sotoarc_Sotograph]: http://en.wikipedia.org/wiki/Sotoarc
[Understand]: http://en.wikipedia.org/wiki/Understand_%28software%29
[VCG]: http://sourceforge.net/projects/visualcodegrepp/
[Veracode]: http://en.wikipedia.org/wiki/Veracode
[C_CLI]: http://en.wikipedia.org/wiki/C%2B%2B/CLI
[Ruby on Rails]: http://en.wikipedia.org/wiki/Ruby_on_Rails
[Objective-C]: http://en.wikipedia.org/wiki/Objective-C
[Windows Mobile]: http://en.wikipedia.org/wiki/Windows_Mobile
[BlackBerry]: http://en.wikipedia.org/wiki/BlackBerry
[Android]: http://en.wikipedia.org/wiki/Android_%28operating_system%29
[iOS]: http://en.wikipedia.org/wiki/IOS_%28Apple%29
[Visual Studio Team System]: http://en.wikipedia.org/wiki/Visual_Studio_Team_System
[Yasca]: http://en.wikipedia.org/wiki/Yasca
[COBOL]: http://en.wikipedia.org/wiki/COBOL
[FindBugs]: http://en.wikipedia.org/wiki/FindBugs
[.NET]: http://en.wikipedia.org/wiki/.NET_Framework
[CodeIt.Right]: http://en.wikipedia.org/wiki/CodeIt.Right
[CodeRush]: http://en.wikipedia.org/wiki/CodeRush
[FxCop]: http://en.wikipedia.org/wiki/FxCop
[CIL]: http://en.wikipedia.org/wiki/Common_Intermediate_Language
[Microsoft Visual Studio]: http://en.wikipedia.org/wiki/Microsoft_Visual_Studio
[Kalistick]: http://en.wikipedia.org/wiki/Kalistick
[NDepend]: http://en.wikipedia.org/wiki/NDepend
[Parasoft dotTEST]: http://en.wikipedia.org/wiki/Parasoft
[ReSharper]: http://en.wikipedia.org/wiki/ReSharper
[IntelliJ IDEA]: http://en.wikipedia.org/wiki/IntelliJ_IDEA
[StyleCop]: http://en.wikipedia.org/wiki/StyleCop
[MSBuild]: http://en.wikipedia.org/wiki/MSBuild
[ActionScript]: http://en.wikipedia.org/wiki/ActionScript
[Apparat]: http://en.wikipedia.org/wiki/Apparat_%28computer_science%29
[AdaControl]: http://en.wikipedia.org/wiki/AdaControl
[Fluctuat]: http://en.wikipedia.org/wiki/Fluctuat
[Astr_e]: http://en.wikipedia.org/wiki/Astr%C3%A9e_%28static_analysis%29
[BLAST]: http://en.wikipedia.org/wiki/BLAST_model_checker
[Cppcheck]: http://en.wikipedia.org/wiki/Cppcheck
[STL]: http://en.wikipedia.org/wiki/Standard_Template_Library
[cpplint]: http://en.wikipedia.org/wiki/Cpplint
[Clang]: http://en.wikipedia.org/wiki/Clang
[Coccinelle]: http://en.wikipedia.org/wiki/Coccinelle_%28software%29
[ECLAIR]: http://bugseng.com/products/eclair
[Eclipse _software]: http://en.wikipedia.org/wiki/Eclipse_%28software%29
[CODAN]: http://wiki.eclipse.org/CDT/designs/StaticAnalysis
[Frama-C]: http://en.wikipedia.org/wiki/Frama-C
[Goanna]: http://en.wikipedia.org/wiki/Red_Lizard_Software#Products
[PC-Lint]: http://en.wikipedia.org/wiki/PC-Lint
[PVS-Studio]: http://en.wikipedia.org/wiki/PVS-Studio
[QA-C]: http://en.wikipedia.org/wiki/QA-C
[SLAM project]: http://en.wikipedia.org/wiki/SLAM_project
[Microsoft Research]: http://en.wikipedia.org/wiki/Microsoft_Research
[Sparse]: http://en.wikipedia.org/wiki/Sparse
[Linux]: http://en.wikipedia.org/wiki/Linux
[Splint]: http://en.wikipedia.org/wiki/Splint_%28programming_tool%29
[AgileJ StructureViews]: http://en.wikipedia.org/wiki/AgileJ_StructureViews
[Checkstyle]: http://en.wikipedia.org/wiki/Checkstyle
[Jakarta]: http://en.wikipedia.org/wiki/Jakarta_Project
[BCEL]: http://en.wikipedia.org/wiki/Byte_Code_Engineering_Library
[Hammurapi]: http://en.wikipedia.org/wiki/Hammurapi_code_review_tool
[Soot]: http://en.wikipedia.org/wiki/Soot_%28software%29
[Squale]: http://en.wikipedia.org/wiki/Squale
[Jtest]: http://en.wikipedia.org/wiki/Jtest
[SemmleCode]: http://en.wikipedia.org/wiki/SemmleCode
[SonarJ]: http://en.wikipedia.org/wiki/SonarJ
[Closure Compiler]: http://en.wikipedia.org/wiki/Google_Closure_Tools#Closure_Compiler
[JSLint]: http://en.wikipedia.org/wiki/JSLint
[syntax checker]: http://en.wikipedia.org/wiki/Syntax_checker
[JSHint]: http://en.wikipedia.org/wiki/JSHint
[Xcode]: http://en.wikipedia.org/wiki/Xcode
[2]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_note-2
[OCLint]: http://oclint.org/
[Perl]: http://en.wikipedia.org/wiki/Perl
[Perl_Critic]: http://en.wikipedia.org/wiki/Perl::Critic
[Damian Conway]: http://en.wikipedia.org/wiki/Damian_Conway
[Perl Best Practices]: http://en.wikipedia.org/wiki/Perl_Best_Practices
[PerlTidy]: http://en.wikipedia.org/wiki/PerlTidy
[Padre]: http://en.wikipedia.org/wiki/Padre_%28software%29
[Python]: http://en.wikipedia.org/wiki/Python_%28programming_language%29
[Pychecker]: http://en.wikipedia.org/wiki/Pychecker
[Pylint]: http://en.wikipedia.org/wiki/Pylint
[formal methods]: http://en.wikipedia.org/wiki/Formal_methods
[program assertions]: http://en.wikipedia.org/wiki/Assertion_%28computing%29
[model checking]: http://en.wikipedia.org/wiki/Model_checking
[constraint satisfaction]: http://en.wikipedia.org/wiki/Constraint_satisfaction
[ESC_Java]: http://en.wikipedia.org/wiki/ESC/Java
[ESC_Java2]: http://en.wikipedia.org/wiki/ESC/Java2
[Java Modeling Language]: http://en.wikipedia.org/wiki/Java_Modeling_Language
[directed graphs]: http://en.wikipedia.org/wiki/Graph_%28mathematics%29
[regular algebra]: http://en.wikipedia.org/wiki/Regular_algebra
[3]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_note-3
[SPARK Toolset]: http://en.wikipedia.org/wiki/SPARK_Toolset
[SPARK Examiner]: http://en.wikipedia.org/wiki/SPARK_Examiner
[SPARK]: http://en.wikipedia.org/wiki/SPARK_%28programming_language%29
[Automated code review]: http://en.wikipedia.org/wiki/Automated_code_review
[Best Coding Practices]: http://en.wikipedia.org/wiki/Best_Coding_Practices
[Dynamic code analysis]: http://en.wikipedia.org/wiki/Dynamic_code_analysis
[Software metrics]: http://en.wikipedia.org/wiki/Software_metrics
[Integrated development environment]: http://en.wikipedia.org/wiki/Integrated_development_environment
[Comparison of integrated development environments]: http://en.wikipedia.org/wiki/Comparison_of_integrated_development_environments
[Link 1]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_ref-1
[PMD - Browse _pmd_5.0.0 at SourceForge.net]: http://sourceforge.net/projects/pmd/files/pmd/5.0.0/
[Link 2]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_ref-2
[Static Analysis in Xcode]: http://developer.apple.com/mac/library/featuredarticles/StaticAnalysis/index.html
[Link 3]: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis#cite_ref-3
[The Role of Abstract Interpretation in Formal Methods]: http://ieeexplore.ieee.org/Xplore/login.jsp?url=http%3A%2F%2Fieeexplore.ieee.org%2Fiel5%2F4343908%2F4343909%2F04343930.pdf%3Farnumber%3D4343930&authDecision=-203
[Java Static Checkers]: http://www.dmoz.org/Computers/Programming/Languages/Java/Development_Tools/Performance_and_Testing/Static_Checkers/
[Open Directory Project]: http://en.wikipedia.org/wiki/Open_Directory_Project
[List of Java static code analysis plugins for Eclipse]: http://www.eclipseplugincentral.com/Web_Links-index-req-viewcatlink-cid-14-orderby-rating.html
[List of static source code analysis tools for C]: http://www.spinroot.com/static/
[List of static source code analysis tools]: https://www.cert.org/secure-coding/tools.html
[CERT]: http://en.wikipedia.org/wiki/CERT_Coordination_Center
[SAMATE-Source Code Security Analyzers]: http://samate.nist.gov/index.php/Source_Code_Security_Analyzers.html
[SATE - Static Analysis Tool Exposition]: http://samate.nist.gov/SATE.html
[A Comparison of Bug Finding Tools for Java]: http://www.cs.umd.edu/%7Ejfoster/papers/issre04.pdf
[University of Maryland]: http://en.wikipedia.org/wiki/University_of_Maryland,_College_Park
[JLint]: http://en.wikipedia.org/w/index.php?title=JLint&action=edit&redlink=1
[Mini-review of Java Bug Finders]: http://www.oreillynet.com/digitalmedia/blog/2004/03/minireview_of_java_bug_finders.html
[O_Reilly Media]: http://en.wikipedia.org/wiki/O%27Reilly_Media
[Parallel Lint]: http://www.ddj.com/218000153
[Integrate static analysis into a software development process]: http://www.embedded.com/shared/printableArticle.jhtml?articleID=193500830