一句话:提出交互式静态分析工具 Cobra,可在超大型代码库上快速运行,且易于使用、免费。
当前静态源码分析器普遍存在速度慢、难以正确使用、成本高昂的问题,而且在配置不当时,即便面对编写良好的代码也会产生大量输出,增加使用负担。为此,作者开发了名为 Cobra 的新工具,旨在支持对超大型代码库进行交互式分析,其核心特点是速度快,因而能够在交互场景下处理大规模代码。工具在设计上强调易用性,并且免费提供。摘要以特邀报告形式介绍该工具,未给出具体的实验数据或量化评估,主要贡献在于提出并工程化了一个面向大规模代码库的交互式静态分析方案。
Current static source code analyzers can be slow, hard to use correctly, and expensive. If not properly configured, they can also generate large amounts of output, even for well-written code. To fix this, we developed a new tool called Cobra. The Cobra tool can be used interactively even on very large code bases, which means that it is very fast. It is also designed to be easy to use and free.
DOI 原文 ·
@inproceedings{paperbot6429,
title = {Interactive analysis of large code bases (invited talk)},
author = {Gerard J. Holzmann},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3478691}
}