Home

Welcome to the awesome-eclipse wiki!

A quick section Java static analysers.

⭐ ⭐ ⭐ means : Recently updated, well documented, liberal license, etc.

Java static analysis

Frameworks

(base on which analysers are built)

OPAL

WALA

Analysers

Bug picker ⭐ ⭐ ⭐

BugPicker analyzes the control- and data-flow of applications to identify code issues that affect overall quality of the software.

IteRace ⭐ ⭐ ⭐

IteRace is a static race detection tool, described in this paper.

Seems better than JChord, with far fewer false positives. See comparison in the paper.

Hopper ⭐ ⭐ ⭐

Chord ⭐ ⭐

Tends to output many false positives (several tens of thousands, where IteRace only emits one or two) On the plus side, it is a framework to write custom analyses, and has an active discussion group

JOANA ⭐ ⭐ ⭐

JOANA analyses Java programs for security leaks (Information Flow Control, IFC). It guarantees to find all violations of integrity or confidentiality – that is, all leaks which result from illegal information flow within a program.

KeshMesh ⭐ ⭐

Good but is not actively maintained right now.

Android specific analysers

Droidel

Others

AJ

Data centric concurrency control.

Can't find an executable. Perhaps not public domain.