facebook/infer

Features

• General Bug Detection - Provides an automated toolset to identify and reduce a wide variety of general programming bugs.
• Static Code Analysis - Provides automated scanning of Java, C, C++, and Objective-C source code to detect bugs and memory leaks.
• Concurrency Auditing - Performs static analysis of multi-threaded code to identify race conditions, deadlocks, and synchronization errors.
• Memory Safety Verification - Identifies null dereferences, buffer overruns, and resource leaks through automated analysis of memory management.
• Intermediate Representations - Translates multiple source languages into a common intermediate representation to apply a unified set of analysis rules.
• IR-Based Bug Detection - Translates multiple languages into a common intermediate representation to detect memory safety issues and resource leaks.
• Inter-procedural Data Flow Analyzers - Tracks data movement between sources and sinks across function boundaries to detect tainted flows and generate data flow graphs.
• Multi-Language Bug Finders - Identifies race conditions, deadlocks, and memory safety issues across Java, C, C++, and Objective-C.
• Incremental Analysis Engines - Utilizes an incremental analysis engine to process only modified code segments, significantly reducing continuous integration time.
• Static Analysis - Ships a comprehensive static analyzer for Java, C, C++, and Objective-C to detect memory leaks and null dereferences.
• Deadlock and Starvation Detection - Finds locking issues and thread scheduling errors that prevent a program from making progress.
• Value and Lifetime Analysis - Identifies null dereferences and resource leaks by tracking uninitialized values through lifetime analysis.
• Static Data Race Detection - Identifies unprotected concurrent accesses to fields or objects that may lead to race conditions.
• Static Race Condition Analysis - Analyzes concurrent code execution to identify potential synchronization errors and race conditions.
• Taint Analysis Engines - Tracks data movement between sources and sinks to detect tainted flows and produce inter-procedural data flow graphs.
• Inter-procedural Data Flow - Tracks data movement across function boundaries to detect tainted flows and resource leaks between different code modules.
• Source-Sink Taint Tracking - Maps data flow from untrusted inputs to sensitive sinks to identify potential security vulnerabilities and memory errors.
• Continuous Integration Pipelines - Integrates incremental static checks into continuous integration pipelines to maintain software quality while reducing build times.
• Execution Path Cost Assessment - Evaluates the algorithmic complexity and computational overhead of specific execution paths within the code.
• Array Bounds Checking - Analyzes array access patterns in source code to identify potential buffer overruns.
• Reachability Analyzers - Checks if annotated functions are reachable and validates that field accesses serve as designated sinks.
• Complexity Analysis - Computes the runtime cost of methods and functions using big-O notation to report algorithmic complexity.
• Custom Analysis Rules - Offers a domain-specific language for writing custom linters and state-machine checks to enforce project-specific coding standards.
• Custom Rule Development - Supports the development of custom analysis rules and state-machine checks to enforce project-specific coding standards.
• Equality Saturation Engines - Implements an equality saturation engine that uses rewrite rules to perform semantic diffing and filter structural changes.
• Retain Cycle Detection - Identifies strong reference cycles that prevent memory from being reclaimed by the system.
• Semantic Diffing Engines - Filters structural changes to perform semantic analysis and evaluate computational complexity.
• Temporal Property Verification - Uses a domain-specific language and state-machines to verify that sequences of events occur in a required temporal order.
• AST Extraction - Provides mechanisms to extract abstract syntax trees via compiler plugins for deep structural analysis of source code.
• Temporal Property Verification - Verifies whether specific sequences of events or state changes occur in the required order.
• Code Analysis - Static analysis tool for identifying potential bugs in mobile code.
• Code Analysis and Linters - Static analyzer for detecting bugs in C and Java.
• Development Tooling - Static analyzer for Java and C-family languages.
• Static Analysis - Static analyzer for Java, C, and Objective-C.
• Static Analysis Tools - Static analysis tool for Java, C, C++, and Objective-C.

Star history