Microsoft considers releasing code checker tool

Microsoft is considering making its advanced code-checking tools commercially available.

Microsoft is considering making its advanced code-checking tools commercially available.

The tools have been in use at the Microsoft Programmer Productivity Research Centre.

The centre has tools for static analysis to examine static source text and patterns that indicate errors.

Tools for dynamic analysis, which observe for program errors while the program is running, also have been a focus, said Thomas Ball, senior researcher with Microsoft's research group.

Static analysis tools which may be released commercially include Prefix, which features a toolkit to analyse source text for common errors.

It does a deep semantic analysis, finding errors such as memory leaks, corruption of memory, and null pointer references, said Ball.

Another static analysis tool, Prefast, is a more lightweight analysis tool for source text.

"It's looking for errors but it's lightweight enough a toolkit that developers can run it on their desktop machine before they ever check in their code," Ball said.

Prefast actually has had a narrow release to driver developers as part of the Microsoft driver developer kit, but the company is considering a wider commercial distribution.

Prefix, which was originally developed by Intrinsa in 1999, and Prefast, which was internally built at Microsoft, have been widely deployed inside Microsoft's major product groups, used on projects such as Windows Server 2003.

Additionally, Microsoft intends to add Slam to its driver developer kit, a core engine which provides rule-checking for device driver development.

Slam checks to make sure an API is being used correctly, Ball said. The Slam engine works with Static Driver, which is a set of rules for finding errors in device drivers.

"What we're doing with tools like Prefix, Prefast and Slam is extending the capability of [bug] checking," Ball said.

Microsoft also plans to make available to universities compilers from its Project Phoenix research effort.

Project Phoenix is intended as a next-generation compiler architecture in which developers can build additional value on top of the compiler to make code faster and find more defects.

Project Phoenix eventually will be incorporated into Microsoft's Visual Studio tool.

The research centre also has a tool called Scout, which provides regression testing to prevent introduction of bugs. It is not known whether this tool be made commercially available.

Microsoft's Programmer Productivity Research Centre has several areas of focus, including advanced compiler technology, performance monitoring and analysis, binary technologies, programming language systems, reliability and software productivity tools.

Paul Krill writes for InfoWorld

Read more on Microsoft Windows software