Introduction, Overview, and Goals of Workshop
Static code analysis is performed without actually executing programs built from that code. At this event, we are covering analysis performed by automated tools. There are numerous commercial as well as open source tools of varying capability available. The sophistication of the tools ranges from those that highlight simple--but serious--coding errors (misuse of libraries, ignored return values, erroneous equality checks, etc.), through tools with more sophisticated analysis that can detect deeper problems (null pointer dereferencing, division by zero, array out of bounds, etc.), to formal methods that mathematically prove properties about a given program (that its behavior matches its specification).
