CodeSonar Release 2.1p2 Release Notes

JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

If you access the manual through the hub's Web GUI, the functionality will not be suppressed because the hub is a web server.
Alternatively, your browser may allow you to explicitly disable the security setting that suppresses functionality. See the CodeSonar FAQ for more information.

CodeSonar Release 2.1, patchlevel 2: Release Notes

Official release date: July 7, 2007.

This release of CodeSonar introduces several new features that extend and enhance functionality, as described below. Also, a number of fairly minor improvements and bug fixes have been made.

Major New Features in CodeSonar 2.1p2

Concurrent Parsing. Multiple instances of the CodeSonar parser can be active concurrently, so CodeSonar project builds will now integrate properly with build systems that make use of concurrency. This can speed up project builds significantly.

Code Store. Source code is saved at parse time; no attempt to access source files will be made later. This means that users will always have access to a snapshot of the code as it was when the project was built.

New Compiler Model: mcpcom. The Intel compiler, used by icc and icpc.

Control Over Static Initializers. The CodeSonar analysis will ignore the contents of static initializers with more elements than specified by the INITIALIZER_LIMIT configuration file parameter (which defaults to 512). This can improve analysis time substantially.

Other New Features in CodeSonar 2.1p2

Building.

The Windows build wizard now retains the information provided for the previous project build (even if the build was not successful).
There is support for authoring custom compiler models.
New executable null-cc allows CodeSonar projects to be built on systems where there is no compiler.
Expanded build phase feedback provides as much information as desired about the project build process (controlled through configuration file parameter VERBOSITY).

HTML Output.

When a bug occurs in a loop, the bug report now always shows all of the loop.
Improved display of paths that include calls to functions with default parameters.

New Bug Classes.

Cast Alters Value
Negative Shift Amount
Shift Amount Exceeds Bit Width

New Configuration File Parameters.

CHECK_MINSCOPE detect globals that could be file/local statics and file statics that could be local static.
CHECK_PARAM_DEREFS check whether parameters are dereferenced without being null-checked.
CHECK_UNBOUNDED_LOOPS flag loops without obvious bounds.
CXX_SUPPRESS_ALL_* suppress an entire class of bugs in C++ compilation units only.
EMIT_PROCEDURE_SIDE_EFFECTS output an XML file showing the variables modified by each procedure.
HTML_METRICS include metrics data in the HTML output.
INITIALIZER_LIMIT an upper limit on the number of elements static initializers must have to be fully analyzed by CodeSonar.
SPACES_PER_TAB tab spacing for source pretty-printing.
SYSTEM_INCLUDE_DIRS the directories CodeSonar will treat as system include directories for the purpose of computing project metrics.
VERBOSITY the amount of feedback desired in the project build phase.

Modified

Bug Class Name

Divide by Zero is now called Division by Zero.

Removed

Compiler models:

acpp
ghcc
ntcc

Building:

The user no longer needs to specify the method to be used for process hooking.
Build options removed:
- -hook-method
- -mmap-base-address
- -no-mmalloc

Fixes

Several memory leak fixes.

Varargs after parameter with default value now parsed correctly.

All class instances are now browsable.

new arrays whose element type is defined through a typedef no longer trigger false positive Divide By Zero warnings.