This note is for C++ beginner programmers who are wondering why everyone keeps telling them to use delete[] for arrays. But, instead of a clear explanation, senior developers just keep hiding behind the magical “undefined behavior” term. A tiny bit of code, a few pictures and a glimpse into nuts…

What benefits does SAST have? What’s the difference between SAST and DAST? What’s IAST? What do all these words mean?! Let’s talk about this and more in the overview of the main types of Application Security Testing (AST). Informational security Before we start deciphering these terms, let’s figure out why we need…

You may often come across the CVE abbreviation in articles about various vulnerabilities and publications on information security incidents. CVE (Common Vulnerabilities and Exposures) is a list of publicly disclosed security vulnerabilities and defects. …

The CWE Top 25 list reflects the most serious software security weaknesses. I invite you to read the updated top list to become aware of the changes happened over the past year. We position the PVS‑Studio analyzer not only as a tool for searching bugs in code but also as…

Developers around the world use their favorite IDEs every day to create software. Today we are checking one of them and looking at the most interesting errors found. Introduction The modern developer uses many tools to succeed. These include IDEs (Integrated development environment). They contain a whole set of tools to…

In part 1 we discussed the basics of C and C++ projects compiling. We also talked over linking and optimizations. In part 2 we are going to delve deeper into intermodular analysis and discuss its another purpose. …

In mid-May this year we released an updated version of our quiz for C++ developers. It’s been 2 months already — keep on reading to learn more about the results! You’ve probably heard of our quiz and even passed it. Anyway, let me give you the details. We chose several…

Starting from PVS-Studio 7.14, the C and C++ analyzer has been supporting intermodular analysis. In this two-part article, we’ll describe how similar mechanisms are arranged in compilers and reveal some technical details of how we implemented intermodular analysis in our static analyzer. Preface Before we inspect intermodular analysis, let’s remember how…

Orleans is a cross-platform framework for creating scalable cloud applications. This software is developed by Microsoft, and PVS-Studio often checks its projects. Let’s see how many suspicious places our analyzer can find this time. Introduction Orleans scales from an on-premises server to cloud-based distributed applications. The project’s main feature is a…