To get a trial key
fill out the form below
Team License (a basic version)
Enterprise License (an extended version)
* By clicking this button you agree to our Privacy Policy statement

Request our prices
New License
License Renewal
--Select currency--
USD
EUR
GBP
RUB
* By clicking this button you agree to our Privacy Policy statement

Free PVS-Studio license for Microsoft MVP specialists
* By clicking this button you agree to our Privacy Policy statement

To get the licence for your open-source project, please fill out this form
* By clicking this button you agree to our Privacy Policy statement

I am interested to try it on the platforms:
* By clicking this button you agree to our Privacy Policy statement

Message submitted.

Your message has been sent. We will email you at


If you haven't received our response, please do the following:
check your Spam/Junk folder and click the "Not Spam" button for our message.
This way, you won't miss messages from our team in the future.

>
>
A database of errors detected by PVS-St…

A database of errors detected by PVS-Studio is available on our website

Oct 17 2012
Author:

The best way to prove a static code analyzer is to find errors in open source projects and share them with the world. If you have ever heard of PVS-Studio, it was most likely from our articles reporting on the checks of such projects as Chromium, WinMerge, TortoiseSVN, Apache HTTP Server, Qt, Clang and many others.

We have gradually collected a large error database. The reports on these errors were, of course, published in the corresponding articles and the projects' authors are aware of them. At least, we did everything we could to inform them. But we also added the bugs into our internal database. Now this database of errors detected by PVS-Studio is open to the public.

n0091_news/image1.png

The database is built according to the following principle. The main page contains a list of all the PVS-Studio diagnostics with descriptions and links to the corresponding documentation sections. For most of them, lists of projects are also given where errors detectable through these diagnostics were found. The most valuable information is the code samples from these projects themselves which you can view by clicking the corresponding links.

Not all the diagnostics are represented by examples in our database - this is because we didn't come across defects of these types in those open source projects that we had checked. But it doesn't mean that the diagnostic itself is bad. It may work well on someone's private projects that we cannot add to our database.

Also note that this database is not a complete list of all the errors found with the help of PVS-Studio in a certain project. It presents only some of the errors. Since this database is being created by ourselves, the PVS-Studio developers, we may often not be able to understand if there is actually an error or just a false positive in somebody else's code. That's why the database includes only what we are sure about. But if there are just a few defects mentioned for some project, it doesn't mean that PVS-Studio cannot find anything else in it. It only means that we have come across (and added into the database) just a few bugs.

You will surely find code fragments with the detected errors in our database. But if you download the latest projects source texts, you will most likely fail to find a certain fragment because the error is fixed by now. If you do find it, it means that the author considered the bug not to be too serious, or it might even signal that we're mistaken thinking something was a defect, while it actually was not and only looked like it.

The database of errors found by PVS-Studio allows us to explode the myth that professional skillful programmers don't make silly mistakes. They do, and you can now see it with your own eyes. But this is not a sign of programmers' inaptitude. It's just because EVERYBODY makes mistakes, and nothing can be done about it.

And one more thing. This database was created with the purpose of advertising PVS-Studio. But is such an honest advertisement bad? Who needs all those blah-blah-blah like "We have all the Fortune500 companies among our customers" and "Your code's quality will rise thanks to our tool"? Our advertisement is the errors we have found, and we are saying it straight out. That's not like marketing texts all about nothing.

You are welcome to take a look at the database of errors detected by PVS-Studio and try PVS-Studio on your project. You can download it here.

Popular related articles
Static analysis as part of the development process in Unreal Engine

Date: Jun 27 2017

Author: Andrey Karpov

Unreal Engine continues to develop as new code is added and previously written code is changed. What is the inevitable consequence of ongoing development in a project? The emergence of new bugs in th…
The Ultimate Question of Programming, Refactoring, and Everything

Date: Apr 14 2016

Author: Andrey Karpov

Yes, you've guessed correctly - the answer is "42". In this article you will find 42 recommendations about coding in C++ that can help a programmer avoid a lot of errors, save time and effort. The au…
Free PVS-Studio for those who develops open source projects

Date: Dec 22 2018

Author: Andrey Karpov

On the New 2019 year's eve, a PVS-Studio team decided to make a nice gift for all contributors of open-source projects hosted on GitHub, GitLab or Bitbucket. They are given free usage of PVS-Studio s…
The Evil within the Comparison Functions

Date: May 19 2017

Author: Andrey Karpov

Perhaps, readers remember my article titled "Last line effect". It describes a pattern I've once noticed: in most cases programmers make an error in the last line of similar text blocks. Now I want t…
Technologies used in the PVS-Studio code analyzer for finding bugs and potential vulnerabilities

Date: Nov 21 2018

Author: Andrey Karpov

A brief description of technologies used in the PVS-Studio tool, which let us effectively detect a large number of error patterns and potential vulnerabilities. The article describes the implementati…
Characteristics of PVS-Studio Analyzer by the Example of EFL Core Libraries, 10-15% of False Positives

Date: Jul 31 2017

Author: Andrey Karpov

After I wrote quite a big article about the analysis of the Tizen OS code, I received a large number of questions concerning the percentage of false positives and the density of errors (how many erro…
The Last Line Effect

Date: May 31 2014

Author: Andrey Karpov

I have studied many errors caused by the use of the Copy-Paste method, and can assure you that programmers most often tend to make mistakes in the last fragment of a homogeneous code block. I have ne…
How PVS-Studio Proved to Be More Attentive Than Three and a Half Programmers

Date: Oct 22 2018

Author: Andrey Karpov

Just like other static analyzers, PVS-Studio often produces false positives. What you are about to read is a short story where I'll tell you how PVS-Studio proved, just one more time, to be more atte…
PVS-Studio ROI

Date: Jan 30 2019

Author: Andrey Karpov

Occasionally, we're asked a question, what monetary value the company will receive from using PVS-Studio. We decided to draw up a response in the form of an article and provide tables, which will sho…
Appreciate Static Code Analysis!

Date: Oct 16 2017

Author: Andrey Karpov

I am really astonished by the capabilities of static code analysis even though I am one of the developers of PVS-Studio analyzer myself. The tool surprised me the other day as it turned out to be sma…

Comments (0)

Next comments
This website uses cookies and other technology to provide you a more personalized experience. By continuing the view of our web-pages you accept the terms of using these files. If you don't want your personal data to be processed, please, leave this site.
Learn More →
Accept