The cost of making a video game has increased over the years. Game development is becoming increasingly complex, the code base is getting larger as well. It’s getting harder for developers to track bugs. And a game full of bugs entails financial losses and reputational damage. …

Welcome all developers and everyone who commiserate. Everyone commented their code at least once — that’s for sure. Was it your code or someone else’s? Were these comments useful? Or were they made to cheer up teammates and team leads at the next code review? Let’s try to discuss a…

Related variables are one of the main problems of static analysis. This article covers this topic and describes how PVS-Studio developers are fighting false positives caused by different relationships between variables. What is this article about? The PVS-Studio development team is striving to improve analysis quality and our analyzer. Recently we added an enhancement and…

The PVS-Studio static analyzer is constantly evolving. We enhance various mechanisms, integrate the analyzer with game engines, IDEs, CI/CD instruments, and other systems and services. A few years ago, PVS-Studio learned to analyze Unreal Engine projects. However, one of the important mechanisms — suppression of analyzer messages (baselining, disabling warnings…

Some developers may be dismissive of checks: they deliberately do not check whether the malloc function allocated memory or not. Their reasoning is simple — they think that there will be enough memory. And if there is not enough memory to complete operations, let the program crash. Seems like a…

Meet the latest PVS-Studio release — 7.18. This article will tell you about how we improved the analysis of modern C++, the search of security defects from the OWASP Top 10 list, and a new feature for embedded developers. You can find more security defects: PVS-Studio covers 9 out of 10 categories from the OWASP Top Ten 2021 We continue developing PVS-Studio as a SAST solution. …

Unity is one of the most popular game engines. It helps create many excellent cross-platform projects. It’s been 4 years since the last time we checked Unity’s source code. Time has come again to see what interesting things we can find. Introduction A while ago, we checked Unity and wrote an…

Toyota ITC Benchmark is a synthetic test set for C and C++. It consists of approximately 650 examples, and it’s designed for testing code analyzers. This article is an answer to the question: “How well does the PVS-Studio static analyzer cover the Toyota ITC Benchmark?”. Introduction We tested PVS-Studio on Toyota…

Barotrauma is an indie game where you can steer a submarine, hide from monsters, and even play the accordion to save your ship from going down. The Barotrauma project is developed by Undertow Games in collaboration with FakeFish. The source code is mainly written in C#. So, today, we’re going…