Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.programmer > #32954

Re: A hypothetical compiler extension

Path csiph.com!news.swapon.de!aioe.org!.POSTED!not-for-mail
From Arne Vajhøj <arne@vajhoej.dk>
Newsgroups comp.lang.java.programmer
Subject Re: A hypothetical compiler extension
Date Wed, 28 Oct 2015 20:09:09 -0400
Organization Aioe.org NNTP Server
Lines 41
Message-ID <n0ro37$tnm$1@speranza.aioe.org> (permalink)
References <extension-20151027221547@ram.dialup.fu-berlin.de> <n0pbf2$ld5$1@speranza.aioe.org> <n0qcpj$1e3$1@dont-email.me>
NNTP-Posting-Host 1lM8B9/qdtKBc/uIRK2Gjw.user.speranza.aioe.org
Mime-Version 1.0
Content-Type text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding 8bit
X-Complaints-To abuse@aioe.org
User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
X-Notice Filtered by postfilter v. 0.8.2
Xref csiph.com comp.lang.java.programmer:32954

Show key headers only | View raw


On 10/28/2015 7:50 AM, Martin Gregorie wrote:
> On Tue, 27 Oct 2015 22:21:20 -0400, Arne Vajhøj wrote:
>> On 10/27/2015 5:24 PM, Stefan Ram wrote:
>>>     The following is hypothetical AFAIK, but wouldn't it be nice?
>>>
>>>     One calls
>>>
>>> javac -Xlint:null
>>>
>>>     and then

>>>     Javac alread has path-value-analysis as it already can detect when a
>>>     path of execution of a method (think of nested ifs) accesses a
>>>     variable that has not been defined yet in this path.
>>
>> I don't think it would be appropriate for the compiler to complain about
>> something that very well may not be a problem due to something being
>> done in the calling code.

> There is a similar tool, 'lint' for C and has been for a very long time,
> though  Its name is 'lint'. There is an enhanced version, 'splint', which
> has replaced lint on some Linux distros. It is separate from the
> compiler. The preferred approach is to run lint after the source has been
> clean compiled. ake a look at their manpages or visit http://splint.org/
> to see what it can do.
>
> I don't see why you shouldn't write a similar program for Java if you're
> feeling keen, though much simpler programs are also useful and can be
> whipped up in no time by using awk or Perl. For instance, I have one,
> written in awk, that searches C source for insecure string functions,
> i.e. using the strcpy() function instead of strncpy(). Its useful for
> hardening older code.

There are a ton of tools available for Java that check for
potential unsafe constructs and violations of coding convention.

Not sure if any of them checks for what Stefan want though.

Arne

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: A hypothetical compiler extension Arne Vajhøj <arne@vajhoej.dk> - 2015-10-27 22:21 -0400
  Re: A hypothetical compiler extension Martin Gregorie <martin@address-in-sig.invalid> - 2015-10-28 11:50 +0000
    Re: A hypothetical compiler extension Arne Vajhøj <arne@vajhoej.dk> - 2015-10-28 20:09 -0400
      Re: A hypothetical compiler extension Martin Gregorie <martin@address-in-sig.invalid> - 2015-10-29 12:24 +0000
        Re: A hypothetical compiler extension Jeff Higgins <jeff@invalid.invalid> - 2015-10-29 18:36 -0400

csiph-web