Tools that have been evaluated by students before (and the reports):
- FindBugs is a
fairly comprehensive collection of bug detectors for Java.
FindBugs is unsound (may not find every bug) and incomplete (warnings
may not indicate true bugs). Compared to other tools, FindBugs
finds a very broad range of errors, but tends to do more shallow
- Daikon is a tool
for dynamically detecting likely invariants in Java and C/C++ programs.
are tools for finding errors in Java programs. They use static analysis
to find errors such as null dereference errors, array bounds errors,
type cast errors, and race conditions at compile time. They support
and post-condition style reasoning.
- Eclat is a tool
automatically generates test inputs for a Java program. Eclat differs
from other tools for generating tests in that it uses a novel selection
mechanism to filter out most of the candidate tests, only presenting to
the user the ones that are most likely to actually reveal an error in
the program or a deficiency in an existing test suite.
is a tool for detecting memory errors in C/C++ programs at runtime, or
debugging garbage-collection related problems in Java. A free trial
version of this commercial product is available.
- Java PathFinder
is a model checker for Java programs. An release (for internal
use only) is available on Blackboard.
Models is a tool for reverse engineering code (the most recent tool
- Exploring the design of a rule-based language and its semantics
- Using the bddbddb package to implement a taintedness analysis
Commercial tools with trial or free versions available:
- A survey of clone detection analysis tools
Open source or research tools:
- Coverity is the
commercial version of Metal. There is a free trial version
is the commercial version of PREfix. You may have to do some
gymnastics to get access to it, but it has been distributed as beta
software so there is hope.
are also fair game; just contact the instructor.
- JLint is a tool that finds
Java bugs using dataflow analysis
- PMD finds simple design
problems in Java programs
- Fluid is a
tool developed at CMU that can assure the absence of concurrency
errors. While it is not publicly available, we may be able to
release it to students interested in evaluating the tool.
- Rigi is a
reverse-engineering tool that is designed to help programmers
and reengineer large C programs.
- MAGIC and
ComFoRT are model-checking tools developed here at CMU.
- Bandera is a
tool for verifying properties of Java programs using model-checking.
is a tool that helps programmers with reverse engineering or
restructuring tasks. The tool can detect abstraction violations,
identify unused variables, functions, and fields of data structures,
and detect simple errors of operations on abstract datatypes (such as
failure to close after open).
a tool that supports better separation of concerns that cross-cut
standard class and method boundaries.
- Splint (formerly LCLint)
is a tool for statically checking C programs for security
vulnerabilities and coding mistakes.
- Zing is a
software model checking project at Microsoft Research that can handle
- BLAST is a software model checker for C
- BOOP is an open source
reimplementation of SLAM, and can be used for verifying device driver
- Microsoft's SLAM project is now part of the Static
Driver Verifier, to be released shortly