PVS-Studio

PVS-Studio
Developer(s)PVS-Studio LLC
Stable release
7.32 / August 16, 2024; 2 months ago (2024-08-16)[1]
Operating systemWindows, Linux, macOS
TypeStatic code analysis Security testing
LicenseProprietary
Websitepvs-studio.com/en/pvs-studio/

PVS-Studio is a proprietary static code analyzer on guard of code quality, security, and code safety supporting C, C++, C++11, C++/CLI, C++/CX, C# and Java.[2][3][4]

PVS‑Studio detects various errors typos, dead code, and potential vulnerabilities (static application security testing, or SAST), the analyzer matches warnings to the common weakness enumeration, SEI CERT coding standards, and supports the MISRA standard. PVS‑Studio warning classifications for various standards:

  • CVE (common weakness enumeration)[5]
  • SEI CERT coding standard[6]
  • MISRA[7]
  • OWASP application security verification standard[8]

PVS-Studio supports integration with the most diverse development tools and compilation systems, as Visual Studio 2022, IntelliJ IDEA, Rider, CLion, VSCode, Qt Creator, Eclipse, MSBuild, CMake, Make, Ninja, Gradle, Maven, Azure DevOps, Unity, and Unreal 5.[citation needed]

  1. ^ "PVS-Studio 7.32: enhanced analysis, new plugins and more". pvs-studio.com. Retrieved 2024-08-16.
  2. ^ C# Joins PVS-Studio Line Up
  3. ^ PVS-Studio extension at msdn.microsoft.com
  4. ^ Static Code Analyzer Reportedly Finds 10,000 Open Source Bugs
  5. ^ "Classification of PVS-Studio warnings according to the Common Weakness Enumeration (CWE)". pvs-studio.com. Retrieved 2022-01-11.
  6. ^ "Classification of PVS-Studio warnings according to the SEI CERT Coding Standard". pvs-studio.com. Retrieved 2022-01-11.
  7. ^ "Classification of PVS-Studio warnings according to the standards: MISRA C, MISRA C++". pvs-studio.com. Retrieved 2022-01-11.
  8. ^ "Classification of PVS-Studio warnings according to the OWASP Application Security Verification Standard (ASVS)". pvs-studio.com. Retrieved 2022-01-11.