Source Code Audits and Metrics

Go Up to Steps in Developing a Project

Source code Audits and Metrics are Quality Assurance (QA) facilities. They provide measures of the source code quality in your projects.

You can apply:

• Source code Audits to both Delphi and C++ projects.

  Note: C++Builder does not support Audits on 64-bit iOS.

• Source code Metrics only to Delphi projects.

Topics

• Audits and Metrics Facilities
• Working with Audits
  • Running Delphi Audits
  • Running C++ Audits
  • Working with Sets of Audits
  • Viewing Results of Audits
  • Exporting Results of Audits
  • Printing Results of Audits
• Working with Metrics
  • Running Metrics
  • Working with Sets of Metrics
  • Viewing Metrics Results
  • Creating a Metrics Chart
• GUI of Audits and Metrics
  • QA Audits dialog box
  • C++ Audits Configuration dialog box
  • Audits pane
  • C++ Audits pane
  • QA Metrics dialog box
  • Metrics pane
  • Print Audits dialog box
  • Save Audits Results and Save Metrics Results dialog boxes
• List of C++ Audits:
  • core:
    • AdjustedReturnValue -- Function Call Returns Value Different From Expected
    • AttributeNonNull
    • CastSize
    • CastToStruct -- Cast from Non-struct to struct Pointer
    • FixedAddr -- Assignment of a Fixed Address to a Pointer
    • PointerArithm
    • PointerSub -- Use of Pointer Subtraction to Determine Size
    • SizeofPtr -- Use of sizeof() on a Pointer Type
    • NullDereference
    • DivideZero - Check for Division by Zero
    • UndefReturn
    • Branch
    • ArraySubscript
    • Assign
    • StackAddressEscape
    • UndefinedBinaryOperatorResult
    • VLASize -- Variable-Length Array of Undefined Size
    • NoReturnFunctions -- Functions that Do Not Return
  • security:
    • ArrayBound -- Access to an Element Out of Array's Boundaries
    • ArrayBoundV2 -- Access to an Element Out of Array's Boundaries
    • ReturnPtrRange -- Returned Pointer Points Outside the Object
  • deadcode:
    • DeadStores -- Expression Value is Not Used
    • IdempotentOperations -- Warn About Idempotent Operations
    • UnreachableCode -- Check for Unreachable Code
  • misc(ellaneous):
    • CFPV -- Comparing Floating-Point Values
    • CVFCD -- Calling Virtual Functions from Constructors and Destructor
    • DCPC -- Define Copy Constructor
    • IVNU -- Iteration Variable is Not Used in Loop Body
    • OPM -- Overriding Private Method
    • RINF -- Redefining an Inherited Nonvirtual Function
    • SFS -- Suspicious For Statement
    • SSSIDC -- switch Statement Should Include the Default Case
    • NC -- Naming Conventions
    • OROT -- Overwrite Related Operators Together
    • PVD -- Provide Virtual Destructor
    • UCSC -- Use C++ Style Casts
    • PMSNT -- Place Methods with Same Name Together
    • RCD -- Restricted Class Declaration
    • ASO - Assignment operator
    • CIUCFL - Complex Initialization or Update Clause in for Loop
    • CIL - Constructor Initialization List

See Also

• AuditsCLI.EXE, the Command Line Audits and Metrics Tool
• Video: Audits DCC in Delphi 2010, by Mike Rozlog