Source Code Analysis Laboratory (SCALe) for Energy ... - CERT

Table 7: Analysis Results, Energy Delivery System A
False True Unknown Total
DCL31-C 705 705
DCL32-C 2 2 116 120
DCL35-C 2 49 51
DCL36-C 19 19
EXP30-C 2 1 3
EXP34-C 2 4 52 58
EXP36-C 4 4 22 30
EXP37-C 4 1 44 49
INT31-C 1,999 1,594 3,593
INT35-C 6 6
FLP34-C 7 2 9
FLP36-C 1 1
ARR30-C 7 7
STR31-C 3 3
STR36-C 4 2 6
STR37-C 1 1
STR38-C 3 4 7
MEM34-C 2 2
FIO30-C 12 12
ENV30-C 3 3
SIG30-C 1 1
CON33-C 1 1
MSC31-C 1 1
MSC34-C 6 2 579 587
Total: 2,785 34 2,456 5,275
The “False” and “True” columns document the number of flagged nonconformities that were determined
to be false and true positives, respectively. Normally it is sufficient to stop after finding
one true positive, but in cases with a small number of flagged nonconformities, all the results
were evaluated to collect data about the true positive and flagged nonconformity rates for the analyzer
checkers. Flagged nonconformities that were not evaluated are marked as “Unknown.”
This particular energy control system violated at least 15 of the CERT C secure coding rules. In
nine other cases, manual analysis eliminated possible rule violations as false positives.
3.6.2 Energy Delivery System B
The second energy delivery system was also evaluated by four static analysis tools supplemented
by manual inspection. Two of the tools (analyzers A and B) were also used in the analysis of
energy delivery system A. The other two analyzers were used for the first time in the analysis of
energy delivery system B. Table 8 shows the flagged nonconformities found from the analysis of
the second energy delivery system.
CMU/SEI-2010-TR-021 | 34