Static analysis protects your code from time bombs

Static code analysis allows you to identify and eliminate many defects at an early stage. Moreover, it’s possible to detect dormant errors that don’t show themselves when they appear. They can cause many problems in the future and it requires many hours of debugging to detect them. Let’s look at an example of such a dormant error.

Continue reading

OWASP, vulnerabilities, and taint analysis in PVS-Studio for C#. Stir, but don’t shake

We continue to develop PVS-Studio as a SAST solution. Thus, one of our major goals is expanding OWASP coverage. You might ask, what’s the use when there’s no taint analysis? That’s exactly what we thought – and decided to implement taint analysis in the C# analyzer. Curious about what we accomplished? Read on!

Note. This article briefly touches upon the topics of SQL injections and working with SQL in C#. This theory serves as context. For in-depth information on these topics, do additional research.

Continue reading

Creating Roslyn API-based static analyzer for C#

After you read this article, you’ll have the knowledge to create your own static analyzer for C#. With the help of the analyzer, you can find potential errors and vulnerabilities in the source code of your own and other projects. Are you intrigued? Well, let’s get started.

Continue reading

How to choose a static analysis tool

Tools to improve and control code quality can be a keyΒ success factor in a complex software project implementation. Static analyzers belong to such tools. Nowadays, you can find various static analyzers: from free open-source to cross-functional commercial solutions. On the one hand, it’s great – you can choose from many options. On the other hand – you have to perform advanced research to find the right tool for your team.

Continue reading

Technical support: what it’s for and how to avoid burnout?

Not everyone enjoys working in support. Many people who work there experience burnout. So maybe companies shouldn’t have any support at all? How do they benefit from it? Is there a way to prevent burnout while working in support? Let’s try to find the answers.

Continue reading

Protocol Buffers, a brutal protocol from Google, vs. PVS-Studio, a static code analyzer

Protocol Buffers is a very popular, cool, and high-quality product that is mostly developed by Google. This is a good challenge for the PVS-Studio static code analyzer. Finding at least something is already an achievement. Let’s give it a shot.

Continue reading