静态分析工具应编译代码

Question

Does there exist static analysis tool (C/C++) which analyzes code without being able to compile it? (The reason I ask is my code may have some functions from external SDK)

Answer 1

Most static analysis tools (eg frama-C ) don't compile C code, but often requires its preprocessed form. So they require the availability of header files used by your code. Often, they fork the compiler just to get the preprocessed form (ie gcc -C -E )

^{Notice that these tools usually don't need or care about the binary form of the libraries you are using, only their header files.}

However, I believe that extending a compiler to add much more static analysis abilities is a plus, since the analyzer can take advantage of all the work done (and the infrastructure provided) by the compiler. This is the main motivation for my (free software, obsolete in 2019) GCC MELT tool (which you can use to extend GCC to do some particular static analysis).

Some few static analyzers -eg coccinelle - are able to handle unpreprocessed C code (using macros). But then, they need some way to understand the macros which your code is using (otherwise they cannot check much: a macro invocation can expand to many thousands statements!).

^{NB all the analyzers mentioned above are free software.}

Answer 2

我已经使用了很多年了： FlexeLint