Splint 3.1.1

Splint is a tool that checks C programs for security issues and coding errors. Splint is a tool for static checking of C programs for security flaws and programming errors. splint made many traditional lint checks including unused declarations, type inconsistencies, use before definition, unreachable code, ignored return values, Execution paths of no return, perhaps infinite loops, and fall through cases.More powerful Controls are made possible by additional information given in the source code annotations. Annotations are stylized comments that document assumptions about functions, variables, parameters and adding types.In checks specifically enabled by annotations, many of the traditional lint checks are improved by exploiting this additional effort information.As and is set programs in the annotation, the best results of the audit. An effort-performance benefit to using the splint curve is illustrated in Figure 1.Splint is designed to be flexible and allow programmers to select appropriate points of the effort curve of particular benefit to projects.As different controls are turned on and more information is given in code annotations number of bugs that can be detected dramatically.Problems increases detected by Splint include: Dereferencing · possibly a null pointer · Using possibly undefined storage or returning storage that is not properly defined · type mismatch with more precision and flexibility than those provided by C compilers · violations information · errors cache management, including the uses of dangling references and memory leaks · changes aliasing dangerous · and global variable uses that are incompatible with the specified interfaces · control flow problems such as infinite loops probably fall through cases or incomplete switches, and suspicious statements · vulnerabilities Buffer overflow · macro implementations or dangerous invocations · violations custom naming conventions.