ThreadSafe is a source code analysis tool that identifies application risks and security vulnerabilities associated with concurrency in Java code bases, using whole-program interprocedural analysis.
ThreadSafe is used to identify and avoid software failures in concurrent applications running in complex environments.
Features
ThreadSafe detects Java concurrency defects:
*
Race condition
A race condition or race hazard is the condition of an electronics, software, or other system where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events. It becomes a bug when one or more of t ...
s – which lead to incorrect or unpredictable behaviour that is difficult to reproduce in a debugger.
*
Deadlock
In concurrent computing, deadlock is any situation in which no member of some group of entities can proceed because each waits for another member, including itself, to take action, such as sending a message or, more commonly, releasing a lo ...
s
– caused by circular waits between threads waiting for shared resources.
* Unpredictable results – caused by incorrect handling of concurrent collections, bad error handling, or mixed object synchronization.
* Performance bottlenecks – caused by incorrect API usage, redundant synchronization, and unnecessary use of shared mutable state.
ThreadSafe is integrated with the
Eclipse
An eclipse is an astronomical event that occurs when an astronomical object or spacecraft is temporarily obscured, by passing into the shadow of another body or by having another body pass between it and the viewer. This alignment of three ce ...
software development environment and with the
SonarQube
SonarQube (formerly Sonar) is an open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs and code smells on 29 programming languages. S ...
software quality management platform. Contextual information is provided within the development environment to assist the developer with the investigation and resolution of concurrency issues, directly in the code.
A command-line version is available for users of IDEs other than Eclipse and for build process integration.
Checking adherence to standards
ThreadSafe detects violations of the concurrency-related rules in the
CERT Oracle Secure Coding Standard for Java.
See also
*
List of tools for static code analysis
This is a list of notable tools for static program analysis (program analysis is a synonym for code analysis).
Static code analysis tools
Languages
Ada
*
*
*
*
*
*
*
*
*
*
*
C, C++
*
*
*
*
*
*
*
*
*
*
*
* ...
References
External links
*
Threads (computing)
Java development tools
Static program analysis tools
{{Software-stub