When should you start using PVS-Studio? What can PVS-Studio detect? Supported standards: MISRA, CWE, CERT, OWASP, AUTOSAR. What about analysis options? What about legacy code?

1. PVS-Studio in 2021
Feature Overview
󰐮 russian version

2. PVS-Studio 7.12
905 Diagnostics
guards quality, security (SAST), and code
safety
13 years on the market
2
🔍 404 for C++
🔍 171 for C#
🔍 106 for Java
🔍 … и 224 specific ones

3. Get support
directly from
developers

4. When should you start using PVS-Studio?

5. For a developer 🔥 You make occasional mistakes during
development
🔥 Debugging when searching for errors is time
consuming
🔥 Errors get into the version control system
🔥 Once an error is found by QA specialists, it’s
diicult to debug that code
5

6. For a manager 💡 You frequently return to old tasks due to bugs
💡 Users report errors in your products
💡 You hire more developers but notice a decline in
code quality
💡 With the increasing amount of code, it
becomes diicult to assess its quality and
reliability
6

7. For a security
professional
🔒 You experience diiculties with external code
audit
🔒 Clients require to use security and safety
standards in development
🔒 Potential customers require the use of such
tools
7

8. What can PVS-Studio detect?

9. memory access
errors
typos
array index
out of bounds
buer
overflow
incorrect method
handling
serialization /
deserialization errors
unreachable
code
security issues
and much more...
incorrect type handling
synchronization
errors
Types of problems
9

10. MISRA
Supported standards
CWE
OWASP
AUTOSAR
CERT
10

11. Generate
reports
Plog Converter component
Generate reports in a convenient
format to integrate into your
backend processes
11

12. Distribute
results
Blame Notifier component
Send analysis results to commit
authors to keep your code base clean
12

13. What about analysis options?

14. Local analysis
Basic use model, runs on developers’
computers
14

15. Incremental
analysis
Check only changed code with this
mode - save time for more important
tasks
15

16. Server-side
analysis
Integrate PVS-Studio into nightly
builds - every morning you’ll get a
detailed report about the code base
state
16

17. Cloud analysis
Run analysis on continuous
integration services in addition to
your company infrastructure tools
17

18. Pull-request
analysis
Check individual commits and entire
pull-requests to simplify code review
18

19. IDE and development tools

20. Filter by certainty level
Fragment with an error
Mark as False Alarm
20

21. Code quality
IDE
Visual Studio
IntelliJ IDEA
Rider
CLion
Qt Creator
Eclipse
Game engines
Build systems
MSBuild
CMake
Make
Ninja
Gradle
Maven
Unreal Engine
Unity
SonarQube
21

22. CI
Embedded
Keil µVision, DS-MDK
IAR Embedded Workbench
Platform.io
QNX Momentics
TI ARM Code Generation
Virtualization
Docker
WSL
Cloud CI
CircleCI
Travis CI
GitLab
Azure DevOps
Jenkins
TeamCity
22
Distributed build
IncrediBuild

23. What about legacy code?

24. Don’t waste time
digging into
warnings after
the first run

25. Focus on issues
in new code

26. Add all warnings to the
suppress file
More about mass suppression...
26

27. PVS-Studio
clients

28. Interested?
try PVS-Studio for free
🔗 Download PVS-Studio
🔗 Request a trial
🔗 Enter a license
What’s next?