Amazon Technologies, Inc.

Kalpana Gondi

John Byron Cook

Michael Tautschnig

Methods, systems, and computer-readable media for refinement of static analysis of program code are disclosed. A report is received. The report was generated using initial static analysis of program code. The report indicates a plurality of warnings regarding the program code, at least some of which represent potential flaws, and the warnings are associated with a plurality of segments of the program code. Additional analysis of the segments of program code is performed. The additional analysis differs at least in part from the initial static analysis. Based at least in part on the additional analysis, at least some of the warnings are determined to represent false positives.

Refinement of static analysis of program code

Systems for performing a static analysis of one or more target software applications are provided. The static analysis is performed on a first source code, and the system identifies code snippets or other portions of the source code that are identifiable due to containing identifiable information, being associated with particular inputs and/or outputs, and the like. The system associates the code snippet with metadata describing the results of the static analysis for the first source code or for the code snippet. Subsequently, when the static analysis is requested for a second source code that uses the code snippet but does not include the source code for the code snippet, the system determines that the code snippet is used in the second source code and obtains the associated metadata to incorporate into the results of the static analysis of the second source code.

Growing community of inventors

Edison, NJ, United States of America

Kalpana Gondi