Tutorials - Tuning Java analysis

Tutorials 1 to 3 demonstrate the most common reason for tuning, that is, to reduce the detection of false positives. These three tutorials include:

  • the addition of validation routines to correct a detected issue
  • the specification of these validations using @CheckTrue, @CheckFalse, and @Check in the knowledge base (.jkb) file to reduce the reporting of the issue

Tutorial 4 demonstrates the least common scenario, that is, tuning a checker to find more issues than originally reported. @Source, @Sink, and @Prop are the knowledge base annotations used in this tutorial to detect a runtime exception that was otherwise going unreported.

Related Topics Link IconSee also