Code Analysis Software?

Bryan Andersen asks: "What is there available in open source code analysis software? I'm about to embark on a project that will make use of lots of open source software. I need to make sure that the software used is as bullet proof as possible with a limited staff. I'd like to make sure there aren't surprises like buffer overflows, race conditions, etc. in the code that we write."

Comments

you can find a few on freshmeat

[Dr. Tom]

http://freshmeat.net/projects/its4/
http://freshmeat.net/projects/r.a.t.s./
http://freshmeat.net/projects/qaudit/

One approach

[pong]

Make sure that everything you write yourself is covered by unit tests. This will catch many problems with the open-source libraries and components you use, but another important benefit in this context is, that it allows you to refactor your code and replace one library with an alternative implementation with confidence.

For JAVA: RECODER

[angel'o'sphere]

Well, the asker did not ask for what kind of software he needs that.

For JAVA I would recomend RECODER, hosted on sourceforge.net. https://sourceforge.net/tracker/?group_id=28173

A compiler, loading a bunsch of JAVA files just like a VM would do, but instead of compiling it builds a "data base" of all structures.

Ok, for the gurus: its a AST with extensive query and manipulations possibilities.

Partial parsing from strings(create a method by letting a string parsed and inserted into a class).

The project is pretty mature as it is a > 3 years work of several Phd.'s and some diploma thesises.

In general that question would have been easyer answered by the asker himslef if he simply had searched the web ....

Regards,
angel'o'sphere