Home > Software Quality News > Dynamic analysis tool from Coverity looks at concurrency defects
Software Quality News:
EMAIL THIS

Dynamic analysis tool from Coverity looks at concurrency defects

By By Jack Vaughan, Managing Editor
07 May 2008 | SearchSoftwareQuality.com

Software quality news and advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

By many accounts, multithreaded concurrent applications are looming as a programming and testing nightmare. That is because new generations of multi-core processor chips -- which gain performance advantages by adding processors rather than by increasing clock rate -- are coming to market in greater numbers and they require a new view on development.

The multi-core chips can cause existing performance tuning techniques to fail. In some cases, programs may run and then fail unexpectedly when race conditions are set off by sleeping concurrency defects.

To help deal with such issues, software quality tool maker Coverity, Inc. has released Coverity Thread Analyzer for Java. The software is a dynamic analysis tool for multithreaded applications. It is said to automatically detect concurrency defects that can cause data corruption and application failures. The tool was announced this week at the JavaOne conference in San Francisco.

"With multi-core, if you only write serial programs, CPUs sit idle," said Andy Chou, chief scientist and co-founder of Coverity. "Software developers are not well trained in this area. But developers are being asked to write [multithreaded programs]."

Concurrent apps seem like a potential hotbed of the worst kind of error -- the irreproducible error.

With multithreaded programs, there are many possible execution paths, said Chou. You may get the same results in different ways each time the program runs. That makes it especially hard to test. "The Thread Analyzer for Java makes race condition detection reproducible and predictable," said Chou.

Code analysis news and tips
Eight reasons to do source code analysis on your Web application 

BMC uses source code analysis to improve software line 

Klocwork enhances static code analysis suite

With race conditions, multiple threads attempt to access the same shared data without appropriate locks in place. The Coverity analyzer automatically instruments bytecode, without changing source code, to detect such bugs. The tool also uncovers code deadlocks that are not immediately apparent in debugging.

By Coverity's estimates, the analyzer has a low two times overhead for most programs, enabling the tool to be used in select production environments. The tool combines with Coverity Prevent static analysis tools for Java, and it integrates with the Eclipse IDE.



Tags: Software testing tools and frameworksSoftware security testing toolsWeb application security tools and servicesVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Software testing tools and frameworks
Performance testing tools - Commercial, less expensive and free
Software Testing Ezines
New IBM Rational, Tivoli integrated tools pair development with IT
STPCon: Do reality checks on performance test products, panelists advise
Demo: Using WebGoat, a free software testing tool
Getting answers about OpenSTA script problems
Defining core software regression tests
Selecting the best tool for stress and load testing
Required prerequisites for performance testing
Surgient 7's self-provisioning promises software testers quick IT resource access

Software security testing tools
Put a stop to software espionage by watermarking source code
How to make your software tamperproof
How can I tell if my software security has been breached?
Lesser-known free software testing tools testers should try
Demo: Using WebGoat, a free software testing tool
Rich Internet applications security testing checklist
Finding cross-site scripting (XSS) application flaws checklist
Webgoat Tutorial
Retaking command of your hacked software
Identifying whether or not your site or software has been hacked

Web application security tools and services
Static analysis tool helps software engineers find bugs during builds
Automated security tool finds flaws in enterprise apps
Parasoft enhances its Application Security Solution
Cenzic Web application security tool targets CSRF attacks
Ruby on Rails security audit service available
Secure software measures: Their strengths and limitations
HP software security suite treats vulnerabilities as defects
Veracode provides security audits for externally sourced code
Enhanced application protection in Dotfuscator Professional 4.3
BMC uses source code analysis to improve software line

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
JUnit  (SearchSoftwareQuality.com)
NUnit  (SearchSoftwareQuality.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Software Development Methods - Extreme Programming, Agile Programming, Scrum
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2006 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts