JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

CodeSonar® 9.2p0 CONFIDENTIAL CodeSecure Inc

Glossary

A

abstract location
A static representation of a single piece of storage in a running program.
abstract syntax tree
A structural representation of a project's source text.

For more information, see API: AST.

actual parameter
An argument associated with a function call.
a-loc
Short for "abstract location".
API
An acronym for "application programming interface", which provides programmatic access to the deep-structure representation of a project.

For information about the CodeSonar API, see section API.

argument
A synonym for actual parameter.
AST
An acronym for abstract syntax tree.

B

build
Building a project is the CodeSonar analog of compiling an executable.

For more information, see section Building.

C

[Visualization feature] In a call graph, there is only one node per function f(). There are edges to this node from every node representing a function that calls f(), and from this node to every node representing a function called by f(). If f() recursively calls itself, there will be an edge looping from the node back to itself. Call graphs are always finite.
call site
The program point at which a function is invoked.
CFG
An acronym for control-flow-graph.
compilation unit
The top-level file and collection of included files associated with a given separate compilation.
compiler model
A CodeSonar subsystem that mimics the command-line processing of an object-code compiler.

For more information, see section Compiler Models.

component search
In a metric report, the set of constraints used to specify which code components will have their metric values displayed. This is one of two sets of constraints for the report: the other is included metrics.
conditional kill
A program point where an assignment to an a-loc may occur.
control-flow edge
A relation between two program points reflecting how control flows from point to point in the program, and labeled with a value encoding the condition under which control may flow.
control-flow graph
The collection of program points associated with a function, and the control-flow edges connecting them.
core path
For warnings associated with execution paths, we refer to the path fragment covered by the warning's Listing as the core path. This is the sequence of calls and program statements whose execution will trigger the warning. Users can examine the possible call sequences leading into the core path with the Explore Callers (Warning) and Search Callers functionality.

D

decl-use
The decl-uses set of a given program point is the set of variables that occur at that point.
def
A variable def is a program point where the variable is necessarily assigned a value.
derived metric
A metric class whose values are computed by mathematically manipulating values of already existing metrics.
displayed binary
[CodeSonar for Binaries only] In a mixed build, we refer to displayed binaries where necessary to contrast with offstage binaries. A displayed binary is one that either

Displayed binaries are included in the project, analyzed, and included in results.

F

false negative
A problem that exists in the analyzed project but for which CodeSonar does not issue a warning.
false positive
A warning issued by CodeSonar that does not correspond to a problem in the analyzed project.
FAQ
Frequently asked questions.

There is a CodeSonar FAQ.

file instance
A synonym for source-file instance.
file static variable
A variable that is local to a file, but not local to a function.
focal analysis
In discussions of the CodeSonar web GUI, the analysis whose information is currently being viewed. For example, a warning report's focal analysis is the analysis that issued that warning instance.

The focal analysis of a Project page is the most recent analysis of that project.

formal parameter
A parameter associated with the definition of a function.

G

global variable
A variable that is neither local to a file nor local to a function.

I

include tree
A tree showing the inclusion relationships among the source-file instances of a compilation unit.

For more information, see section API: Source Files.

included file
A source file included directly or indirectly into a compilation unit.

For more information, see API: Source Files.

included metrics
In a metric report, the set of constraints used to specify which metrics will be reported. This is one of two sets of constraints for the report: the other is component search.
installation instructions
How to install CodeSonar.

See the CodeSonar Installation Instructions.

K

kill
A program point where an a-loc is definitely assigned a value.
kind (functions)
A categorization of functions.

For more information, see section API: PDG.

L

license key
The mechanism that controls use of CodeSonar.

For more information, see section How CodeSonar Licenses Work.

local variable
An automatic variable or a formal parameter.

M

macro
An identifier that is replaced by a sequence of tokens when it occurs in source text.
may kill
Either kill or conditional kill.
memory allocator
A function such as malloc used for dynamic memory allocation. For more information, see section C/C++ Allocators.
most recent analyses
For a specific hub, describes a set of analyses: the most recent analysis of each project on the hub.

N

non-local variable
An variable not declared in a function is non-local to that function.

O

occurrence
A program point where a variable's name occurs literally.
offstage binary
[CodeSonar for Binaries only] In a mixed build, an offstage binary is one that meets all of the following conditions.

Warnings whose paths incorporate both offstage and non-offstage components (source code, displayed binaries) of the project are reported with each offstage segment of the path projected onto the closest call site in analyzed source code or displayed binary.

The converse of an offstage binary is a displayed binary.

P

pointer variable
A variable that may contain the address of another variable, or the address of a function.
primary hub
A hub that has its own hub database, located in its hub directory. (The alternative is a satellite hub.)
procedure
A synonym for function.
program point
The representation of a source-code location in CodeSonar's deep-structure program representation.
project
A mechanism for grouping all the CodeSonar analyses of a single software project.

For more information, see the Project section.

R

regular expression
A search pattern used to specify a set of named entities.
release notes
Information specific to a release.

See the CodeSonar Release Notes.

S

satellite hub
A hub that does not have its own hub database, but instead uses the hub database belonging to the associated primary hub. For more information, see section Satellite Hubs.
source-file instance
An instance of a source file in a compilation unit of a project.

For more information, see:

source patch directory
A directory D whose subdirectories contain source file patches. Specify SOURCE_PATCH_DIRECTORIES += D in a configuration file to instruct CodeSonar to use the patches in D's source patch subdirectories.
source patch subdirectory
An immediate subdirectory D/F.x of a source patch directory D, where F.x is the name of a source file (usually a header file) and all files in F.x/ are patch files to be applied to F.x during the source modification step of the CodeSonar project build phase. This functionality is primarily used for template header patching.
string variable
A string constant, or a variable that represents a collection of string constants.
structure field
A named part of a structure variable.
syntax coloring
Display of source text according to its syntax.

T

table limit
In a metric report containing multiple tables, the table limit specifies an upper bound on the size of each table in the report.

Tables in other GUI pages (and in metric reports containing exactly one table) provide standard pagination controls, allowing table size to be adjusted dynamically.

true positive
A warning issued by CodeSonar that corresponds to a real problem in the analyzed project.

U

undefined function
A function that is referenced but not defined in the project.
union field
A named part of a union variable.
use
A program point where the value of a variable is taken, either directly or indirectly (via pointer dereference).

V

variable
A location that can contain a value.
 

To report problems with this documentation, please visit https://support.codesecure.com/.