Protocol Buffers is a very popular, cool, and high-quality product that is mostly developed by Google. This is a good challenge for the PVS-Studio static code analyzer. Finding at least something is already an achievement. Let’s give it a shot.

I am writing about Protocol Buffers (protobuf) as part of…

We often check retro games. In our company, many developers like to find interesting projects for themselves. They feel nostalgic when they’re studying these projects. But we need to run retro games on something, right? This time we checked a project that helps to run old games on modern hardware.

Introduction

…

The PVS-Studio developers often check open-source projects and write articles about that. Sometimes, when writing an article, we come across interesting situations or epic errors. Of course, we want to write a small note about it. This is one of those cases.

Introduction

At the moment I’m writing an article about…

Everyone who runs the static analyzer on a project for the first time is slightly shocked by hundreds, thousands or even tens of thousands of warnings. It may be frustrating. Is my code so terrible? Or is the analyzer lying? In any case, filtering by the severity changes the situation…

This article covers the new version of the C# language — C# 10. Compared to C# 9, C# 10 includes a short list of enhancements. Below we described the enhancements and added explanatory code fragments. Let’s look at them.

Enhancements of structure types

Initialization of field structure

Now you can set initialization of fields and properties in structures:

…

The PVS-Studio static analyzer allows you to automatically find various problems in the source code. It can also detect code fragments that do not comply with the OWASP Application Security Verification Standard. By default, this feature is disabled due to the specificity of some diagnostic rules. However, you can easily…

Modern applications have lots of code. And the C++ language doesn’t get easier. Nowadays, code reviews are not enough to fully analyze program code. Here’s where static code analysis comes in.

Why it is challenging to develop a modern C++ application

C++ programmers face two main challenges — modern projects size and the C++ complexity. Now, it’s hard and even…

Commercial static analyzers perform deeper and fuller code analysis compared to compilers. Let’s see what PVS-Studio found in the source code of the LLVM 13.0.0 project.

How this article appeared

Compilers developers constantly improve their products and built-in code analyzers. Some IDEs such as Visual Studio and CLion provide enhanced built-in analyzers. So, developers…