Coverity Quality Advisor -...
2
Coverity ® Quality Advisor Coverity ® Quality Advisor surfaces quality defects right in the developer’s workflow with accuracy and actionable remediation guidance. Intelligent Code Analysis The Coverity ® Static Analysis Verification Engine ™ (Coverity SAVE ™ ) is the analysis foundation for the Coverity ® Development Testing Platform. This award-winning analysis engine applies multiple patented techniques for accurate issue detection, based on a decade of research and development and analysis of over 5 billion lines of proprietary and open-source code. As a foundation for Quality Advisor, Coverity SAVE intelligently tests code changes with a deep understanding of behavior and criticality to accurately identify hard-to-spot yet potentially crash-causing quality defects in C/C++, Java and C# codebases. Defects are surfaced in Quality Advisor for fast and easy remediation. Efficient Issue Management Coverity ® Connect is the collaborative issue- management console to efficiently manage all issues surfaced by Quality Advisor, Security Advisor and Test Advisor to resolution within a unified workflow. Users can prioritize and filter based on criticality and impact, utilize source-code navigation to identify the exact path to the defect, and automatically identify every occurrence of the defect across shared code. CWE-compatible mapping and knowledge base provides developers with additional information about each defect. Defects can also be automatically assigned to the appropriate developer for faster resolution. Coverity ® Quality Analysis Packs In addition to identifying quality defects with Coverity SAVE, you can seamlessly integrate additional analysis results to efficiently manage multiple types of issues to resolution within a unified development testing workflow. Coverity offers the following add-on analysis packs to Quality Advisor: Coverity ® Dynamic Analysis for Quality Advisor, Coverity ® Architecture Analysis for Quality Advisor and FindBugs ™ Analysis for Quality Advisor. Analysis engines commonly look for different types of quality issues and therefore many organizations find it valuable to implement multiple tools, but managing them in silos is not scalable or cost-effective. With the Coverity ® Analysis Integration Toolkit you can Key Features Coverity Data Sheet • Concurrency defects such as deadlocks, race conditions and blocking misuse • Performance degradation problems due to memory leaks, file handle leaks, custom memory and network resource leaks, database connection leaks • Crash-causing errors such as null pointer dereference, use-after-free, doublefree, improper memory allocation, and mismatched array new/delete • Incorrect Program Behavior caused by dead code, uninitialized variables, invalid use of negative variables • Improper use of APIs with C++ STL usage errors Understand the severity and impact of quality defects on the projects and the products that share code to make better decisions on which defects to fix first. Defects Surfaced Through Quality Advisor
Transcript of Coverity Quality Advisor -...
Coverity® Quality AdvisorCoverity® Quality Advisor surfaces quality defects right in the developer’s workflow with accuracy and actionable remediation guidance.
Intelligent Code AnalysisThe Coverity® Static Analysis Verification Engine™ (Coverity SAVE™) is the analysis foundation for the Coverity® Development Testing Platform. This award-winning analysis engine applies multiple patented techniques for accurate issue detection, based on a decade of research and development and analysis of over 5 billion lines of proprietary and open-source code. As a foundation for Quality Advisor, Coverity SAVE intelligently tests code changes with a deep understanding of behavior and criticality to accurately identify hard-to-spot yet potentially crash-causing quality defects in C/C++, Java and C# codebases. Defects are surfaced in Quality Advisor for fast and easy remediation.
Efficient Issue Management Coverity® Connect is the collaborative issue-management console to efficiently manage all issues surfaced by Quality Advisor, Security Advisor and Test Advisor to resolution within a unified workflow. Users can prioritize and filter based on criticality and impact, utilize source-code navigation to identify the exact path to the defect, and automatically identify every occurrence of the defect across shared code. CWE-compatible mapping and knowledge base provides developers with additional information about each defect. Defects can also be automatically assigned to the appropriate developer for faster resolution.
Coverity® Quality Analysis Packs In addition to identifying quality defects with Coverity SAVE, you can seamlessly integrate additional analysis results to efficiently manage multiple types of issues to resolution within a unified development testing workflow. Coverity offers the following add-on analysis packs to Quality Advisor: Coverity® Dynamic Analysis for Quality Advisor, Coverity® Architecture Analysis for Quality Advisor and FindBugs™ Analysis for Quality Advisor. Analysis engines commonly look for different types of quality issues and therefore many organizations find it valuable to implement multiple tools, but managing them in silos is not scalable or cost-effective. With the Coverity® Analysis Integration Toolkit you can
Key Features
Coverity Data Sheet
• Concurrencydefectssuchasdeadlocks,raceconditionsandblockingmisuse
• Performancedegradationproblemsduetomemoryleaks,filehandleleaks,custommemoryandnetworkresourceleaks,databaseconnectionleaks
• Crash-causingerrorssuchasnullpointerdereference,use-after-free,doublefree,impropermemoryallocation,andmismatchedarraynew/delete
• IncorrectProgramBehaviorcausedbydeadcode,uninitializedvariables,invaliduseofnegativevariables
• ImproperuseofAPIswithC++STLusageerrors
Understandtheseverityandimpactofqualitydefectsontheprojectsandtheproductsthatsharecodetomakebetterdecisionsonwhichdefectstofixfirst.
Defects Surfaced Through Quality Advisor
Coverity® Quality AdvisorCoverity Data Sheet
integrate third-party analysis results to manage Quality Advisor defects alongside third-party quality defects within a unified workflow. Improving the manageability of multiple tools enhances developer productivity and provides a consistent process for issue resolution, regardless of how the issue was identified.
Coverity SDLC IntegrationsQuality Advisor provides bi-directional integration with existing lifecycle tools to make development testing a natural part of the SDLC process. Coverity supports integrations with the critical tools and systems used to support
the development process, including: IDEs, bug-tracking systems, build and continuous integration systems, and HP Application Lifecycle Management.
• Windows • Visual Studio versions 2005, 2008, and 2010• .NET 4.0 are required for any Windows
and Visual Studio version
• 1 GHz CPU• 1 GB of RAM minimum, 2 GB recommended• 1 GB of free hard disk space
Supported Platforms Supported IDEs Minimum System Requirements
Coverity Quality Advisor for C#
• AIX• FreeBSD• HP-UX• Linux• Mac OS X• NetBSD• Solaris• Windows
• Eclipse v3.5, v3.6, v3.7, v3.8, v4.2• ARM Development Studio• IBM Rational Team Concert (RTC)• WindRiver Workbench v3.2, v3.3• Visual Studio versions 2005, 2008,
and 2010• .NET 4.0 are required for any
Windows and Visual Studio version
Supported Environments
Supported Platforms Supported Compilers Supported IDEs Minimum System Requirements
Coverity Quality Advisor for C/C++
• Linux• Mac OS X• Solaris• Windows
• Eclipse v3.5, v3.6, v3.7, 3.8, 4.2 • IBM Rational Team Concert (RTC)
• 1 GHz CPU• 1 GB of RAM minimum, 2 GB recommended• 1 GB of free hard disk space
Supported Platforms Supported IDEs Minimum System Requirements
Coverity Quality Advisor for Java
Browser Minimum System Requirements
Coverity Connect Browser Support
• Internet Explorer 8 or 9• Firefox 5 or later• Google Chrome 7 or later• Safari 5 or later
• Dual core Intel® x86 or AMD 3.0GHz processor 64-bit 2 GB of free RAM
• Additional deployment scenarios are supported
For More Information: www.coverity.comEmail: [email protected]
Coverity Inc. Headquarters185 Berry Street, Suite 6500San Francisco, CA 94107 USA
©2012Coverity,Inc.Allrightsreserved.CoverityandtheCoveritylogoaretrademarksorregisteredtrademarksofCoverity,Inc.intheU.S.andothercountries.Allothercompanyandproductnamesarethepropertyoftheirrespectiveowners.
U.S. Sales: (800) 873-8193International Sales: +1 (415) 321-5237Email: [email protected]
• 1 GHz CPU• 1 GB of RAM minimum, 2 GB recommended• 1 GB of free hard disk space
• ARM• Cosmic C Cross
Compilers• Freescale Code
Warrior• GNU GCC, G++• Green Hills• HP aCC• IAR• IBM, XLC• Intel C++
• Keil• QNX • Renesas• Sun (Oracle)CC
and cc• Texas Instruments • Visual Studio• WindRiver• Xcode GCC
and G++
![[China merge world tour] Coverity Development Testing](https://static.fdocuments.net/doc/165x107/559b6bd01a28ab27188b4787/china-merge-world-tour-coverity-development-testing.jpg)
