为了保证Windows环境下C/C++和Java软件产品质量,对C/C++代码和Java代码进行静态检查非常重要。以SVN作为软件配置管理工具,将重量级静态检查工具Coverity和Fortify集成到持续集成工具ICP-CI上,分别对C/C++代码和Java代码进行重量级静态检查。详细叙述了Windows环境下软件配置管理工具SVN客户端安装,SVN版本库的代码更新,对C/C++和Java代码分别进行Coverity和Fortify编译器的配置、编译脚本编写和在ICP-CI任务管理页面上配置检查任务。介绍了静态检查处理过程,分析了出现各种常见问题的原因并提出了相应的解决方案。给出了一个软件产品中C/C++代码模块和Java代码模块的重量级静态检查应用案例。工作实践表明,进行重量级静态检查有助于及时发现并解决C/C++和Java软件源代码的各种缺陷和安全漏洞,从而提高软件产品的质量和安全性。%In order to ensure the quality of code in language C/C++ and Java based on Windows,it is very important for the static chec-king to code of C/C++and Java. With SVN as configuration management tool,the heavy-weight static checking tools Coverity and For-tify are integrated into continuous integration tool ICP-CI,and static checking is to be done for both C/C++and Java. The SVN client in-stallation and the code updating of the SVN repository under Windows is described in details,and the Coverity and Fortify compiler con-figuration,the compiler scripts writing,and the inspection tasks configuration on ICP-CI task management page are conducted for both C/C++ and Java. The process of the static checking is introduced and the causes of problems are analyzed and the corresponding solutions are given. Finally the heavy-weight static checking applied in a case for both modules of code in C/C++and Java in software product is introduced. Practice shows that the static checking is helpful to discover and solve all kinds of flaws of the code in C/C++and Java time-ly,improving quality and safety for software.
展开▼
