PVS-Studio 7.39: OWASP Top Ten 2021, enhanced Visual Studio Code plugin, extended MISRA Compliance support, and more
Several issues and crashes related to the new C++ parser, introduced in the previous version of the PVS-Studio C++ analyzer, have been resolved. This included fixing critical crashes when analyzing Unreal Engine projects. In case of instability with the new parser, it is recommended to temporarily switch back to the previous implementation via the use-old-parser option and to report the issue to the technical support team. Such feedback helps enhance the parser's stability and reliability.
We have increased the coverage of OWASP Top 10 2021 list in PVS-Studio Java analyzer. It now addresses 9 out of 10 categories. More information is available in the documentation.
The generation of MISRA Compliance report has been updated to support the new versions of the MISRA guidelines recognized by the analyzer. We are actively working to expand the coverage of the MISRA C 2023 standard and plan to finish it by the end of 2025. More information on MISRA standards coverage can be found here.
PVS-Studio plugin for Visual Studio Code now supports running analysis in compilation monitoring mode on Windows operating systems. We are planning to add build tracing support for Linux in future updates in PVS-Studio integration into Visual Studio Code. More information is available in the documentation.
PVS-Studio 7.38: new C++ analyzer core, user annotations in Java, enhanced taint analysis, and more
We have implemented a new C and C++ core for PVS-Studio analyzer, featuring a complete redesign of key components: the parser, semantic analyzer, and type system. The new core offers more precise handling of template constructs and significantly improves parsing of the standard library and modern C++ code. During the Early Access Program (EAP), it has shown stable performance on many real-world projects. To ensure backward compatibility, the temporary switch to the previous core version has been added. For more information, please consult the documentation. If you encounter any problems during analysis, you can contact our technical support. Your feedback will accelerate the finalization of the new core.
PVS-Studio Java analyzer now supports a user annotation mechanism, along with marking tainted sources and sinks during taint analysis. For more details on the mechanism and annotation file syntax, please refer to the documentation.
We have included a version-based listing in the PVS-Studio warning classification page for MISRA C and MISRA C++. To view the full page, please follow the link. We continue to expand the coverage of the MISRA C 2023 standard and plan to finish it by the end of 2025.
Using Kotlin DSL is now supported in the PVS-Studio Gradle plugin. For more details on this update, please consult the documentation.
PVS-Studio 7.37: enhanced taint analysis, MISRA version control, SLNX project support, and more
The C++ analyzer now detects more critical issues using tainted data flow, including divisions by zero, buffer overflows, bitwise shifts, signed integer overflows, and passing tainted values as arguments. PVS-Studio C# and Java analyzers now factor in tainted data when detecting array overruns, overflows, and possible division by zero.
In the C and C++ analyzer, the work with the standard library and support of the C23 language standard was improved.
Our team has added the option to select a version of the MISRA C Coding Guidelines standard not only in the Visual Studio plugin but also in PVS-Studio plugins for Visual Studio Code, Qt Creator, CLion, and Rider—plus in the command-line utilities, PVS-Studio_Cmd.exe and pvs-studio-analyzer.
The analyzer now supports C++ and C# MSBuild projects that use the SLNX solution format.