Patents Assigned to Coverity, Inc.
  • Publication number: 20150007140
    Abstract: A method is provided to prioritize testing of computer program code comprising: determining first test coverages of items within a first source code version for multiple tests; storing in a non-transitory storage device, a first history that indicates the determined first test coverages of the items within the first source code version; identifying occurrences of the items within a second source code version; determining first weights associated with tests, wherein a respective weight associated with a respective test is indicative of a respective number of respective items within the second source code version that are covered by the respective associated test according to the first history; and prioritizing the multiple respective tests based at least in part upon the determined first weights.
    Type: Application
    Filed: September 26, 2013
    Publication date: January 1, 2015
    Applicant: Coverity, Inc.
    Inventors: Marat Boshernitsan, Andreas Kuehlmann
  • Patent number: 8863093
    Abstract: A method to instrument program code for a virtual machine that comprises, in the course of loading a class to a virtual machine, adding code to the class to declare a field that corresponds to a field declared in a first bootstrap class.
    Type: Grant
    Filed: March 6, 2009
    Date of Patent: October 14, 2014
    Assignee: Coverity, Inc.
    Inventors: Andy Chou, John Kodumal
  • Patent number: 8762961
    Abstract: Methods are provided that allow a false path pruner to traverse a directed acyclic graph in conjunction with one or more checker programs that are analyzing a program for defects or other artifacts of interest. While the checkers may have ways of avoiding re-traversal of portions of the graph that have already been traversed, the false path pruner may override such decisions made by the checkers as a result of a false path in order to allow re-traversal during a future different traversal when that same defect or artifact may not lie along a false path, and therefore avoid missing a valid defect or artifact. Computer programs stored on tangible media are provided that implement the methods of the invention.
    Type: Grant
    Filed: January 21, 2013
    Date of Patent: June 24, 2014
    Assignee: Coverity, Inc.
    Inventors: Andy Chou, Sumant J. Kowshik
  • Publication number: 20140130020
    Abstract: A method is provided method to evaluate impact of a change in code of a depended upon component of a system stored in a non-transitory computer readable storage device, upon a dependent component of the system, the method comprising: identifying a dependency relationship between a first component stored in a storage device and a second component stored in the storage device; in response to a determination that the second component depends upon the first component, configuring a computer system to obtain a first property evaluation corresponding to the first component; and in response to obtaining the first property evaluation corresponding to the first component, configuring the computer system to associate the first property evaluation with the second component, and determine a second property evaluation corresponding to the second component, is the second component being associated with the first property evaluation.
    Type: Application
    Filed: September 26, 2013
    Publication date: May 8, 2014
    Applicant: Coverity, Inc.
    Inventors: Marat Boshernitsan, Andreas Kuehlmann, Scott McPeak, Philip Chong, Tobias Welp
  • Publication number: 20140047538
    Abstract: A method is provided to infer taintedness in code expressions encoded in a computer readable device comprising: configuring a computer system to, store a representation of a computer program that is to be evaluated in non-transitory storage media; identify within the representation a pointer cast operation; determine whether an identified cast operation involves a cast from a pointer to a raw memory data type to a pointer to a structured data type; determine whether a structured data type casted to is associated with indicia of externalness; designating data addressed by that pointer as tainted; and determine whether data designated as tainted is consumed by an operation in the computer program that acts as a taintedness sink.
    Type: Application
    Filed: August 8, 2012
    Publication date: February 13, 2014
    Applicant: Coverity, Inc.
    Inventors: Roger H. Scott, Andy C. Chou
  • Patent number: 8516434
    Abstract: Methods are provided for marking and merging individual report elements, patterns, or defects resulting from analysis based on common characteristics within a report or across reports resulting from different analysis runs. Methods are also provided for migrating a set of report elements, patterns, or defects resulting from one version of an analysis tool to one consistent with a new version of the analysis tool while preserving as much information as possible from the older set.
    Type: Grant
    Filed: July 7, 2008
    Date of Patent: August 20, 2013
    Assignee: Coverity, Inc.
    Inventor: Scott G. McPeak
  • Publication number: 20130198725
    Abstract: Methods are provided that allow a false path pruner to traverse a directed acyclic graph in conjunction with one or more checker programs that are analyzing a program for defects or other artifacts of interest. While the checkers may have ways of avoiding re-traversal of portions of the graph that have already been traversed, the false path pruner may override such decisions made by the checkers as a result of a false path in order to allow re-traversal during a future different traversal when that same defect or artifact may not lie along a false path, and therefore avoid missing a valid defect or artifact. Computer programs stored on tangible media are provided that implement the methods of the invention.
    Type: Application
    Filed: January 21, 2013
    Publication date: August 1, 2013
    Applicant: Coverity, Inc.
    Inventor: Coverity, Inc.
  • Patent number: 8473907
    Abstract: A method and apparatus for evaluating quality of a codebase is provided. The evaluation is provided by developing metrics, indicators, and indices for all levels of a codebase to provide indicators of quality and to enable identification of code blocks that need to be improved.
    Type: Grant
    Filed: July 31, 2008
    Date of Patent: June 25, 2013
    Assignee: Coverity, Inc.
    Inventors: Ahmad Zandi, Timothy M. Braje, Alexander King, Susan Marie Kunz, Darin Manica, James W. Nash, Nathan Derrek Ryan
  • Patent number: 8413249
    Abstract: A method comprising: providing in a non-transitory machine readable storage device a first information structure that includes respective elements that each respectively represent one or more components or communication channels or a combination thereof of a system that includes one or more machines configured with computer software; wherein the first information structure associates at least one element with at least one of an attribute indicative of a mitigation of one at least one known vulnerability of the at least one component or communication channel or combination thereof represented by the at least one element; using a computer system to produce and to store within a non-transitory machine readable storage device an analysis of as-built code used to configure one or more machines to implement the system; wherein the produced analysis includes an output log with respective entries that include respective code references and respective indicia of attributes corresponding to respective observation point
    Type: Grant
    Filed: September 30, 2010
    Date of Patent: April 2, 2013
    Assignee: Coverity, Inc.
    Inventor: Andy C Chou
  • Patent number: 8359583
    Abstract: Methods are provided that allow a false path pruner to traverse a directed acyclic graph in conjunction with one or more checker programs that are analyzing a program for defects or other artifacts of interest. While the checkers may have ways of avoiding re-traversal of portions of the graph that have already been traversed, the false path pruner may override such decisions made by the checkers as a result of a false path in order to allow re-traversal during a future different traversal when that same defect or artifact may not lie along a false path, and therefore avoid missing a valid defect or artifact. Computer programs stored on tangible media are provided that implement the methods of the invention.
    Type: Grant
    Filed: August 22, 2008
    Date of Patent: January 22, 2013
    Assignee: Coverity, Inc.
    Inventors: Andy Chou, Sumant J. Kowshik
  • Publication number: 20110270838
    Abstract: Updating a set of items is disclosed. A set of items is received. The set of items is partitioned into groups. Group dependency information for the groups is calculated. Optionally, a dependency report is produced. Optionally, groups are updated. Optionally, change impact analysis is performed.
    Type: Application
    Filed: June 7, 2011
    Publication date: November 3, 2011
    Applicant: Coverity, Inc.
    Inventor: Kevin W. Jameson
  • Patent number: 7966346
    Abstract: Updating a set of items is disclosed. A set of items is received. The set of items is partitioned into groups. Group dependency information for the groups is calculated. Optionally, a dependency report is produced. Optionally, groups are updated. Optionally, change impact analysis is performed.
    Type: Grant
    Filed: January 23, 2006
    Date of Patent: June 21, 2011
    Assignee: Coverity, Inc.
    Inventor: Kevin W. Jameson
  • Publication number: 20100005444
    Abstract: Methods are provided for marking and merging individual report elements, patterns, or defects resulting from analysis based on common characteristics within a report or across reports resulting from different analysis runs. Methods are also provided for migrating a set of report elements, patterns, or defects resulting from one version of an analysis tool to one consistent with a new version of the analysis tool while preserving as much information as possible from the older set.
    Type: Application
    Filed: July 7, 2008
    Publication date: January 7, 2010
    Applicant: COVERITY, INC.
    Inventor: Scott G. McPeak
  • Publication number: 20090077542
    Abstract: Methods are provided that allow a false path pruner to traverse a directed acyclic graph in conjunction with one or more checker programs that are analyzing a program for defects or other artifacts of interest. While the checkers may have ways of avoiding re-traversal of portions of the graph that have already been traversed, the false path pruner may override such decisions made by the checkers as a result of a false path in order to allow re-traversal during a future different traversal when that same defect or artifact may not lie along a false path, and therefore avoid missing a valid defect or artifact. Computer programs stored on tangible media are provided that implement the methods of the invention.
    Type: Application
    Filed: August 22, 2008
    Publication date: March 19, 2009
    Applicant: Coverity, Inc.
    Inventors: Andy CHOU, Sumant J. Kowshik
  • Patent number: 7496601
    Abstract: Collection command applicators improve the productivity of human knowledge workers by enabling them to automatically process of large numbers of collections of arbitrary computer files. In operation, collection command applicators dynamically recognize interesting collections, calculate an optimal execution dependency visit order, determine an optimal parallel execution order, and apply arbitrary computer commands to the recognized collections in accordance with the calculated execution orderings. Collection command applicators thereby make it possible to process large numbers of collections in automated, scalable ways that were not previously possible.
    Type: Grant
    Filed: May 13, 2005
    Date of Patent: February 24, 2009
    Assignee: Coverity, Inc.
    Inventor: Kevin Wade Jameson
  • Patent number: 7447703
    Abstract: Collection information managers improve the productivity of knowledge workers by organizing information about arbitrary collections of computer files into collection data structures, for use by automated collection processing programs. Three kinds of knowledge are obtained and organized by collection information managers: collection instance information, collection content information, and collection processing information. Software programs can use information in collection data structures to precisely understand and process collections in useful ways that were not previously possible.
    Type: Grant
    Filed: June 21, 2001
    Date of Patent: November 4, 2008
    Assignee: Coverity, Inc.
    Inventor: Kevin Wade Jameson
  • Patent number: 7409376
    Abstract: Collection content classifiers classify computer files and other collection content in accordance with predetermined classification specifications. In operation, collection content classifiers dynamically discover collection content members, assign data types to content members, associate symbolic actions with content members, determine processing dependencies among content members, and return organized classification information to calling programs for subsequent use in processing content members. Collection content classifiers thereby improve the productivity of human knowledge workers by enabling the construction of smart, collection-aware application programs that can perform more extensive, more complex, and more automated collection processing operations than were previously possible.
    Type: Grant
    Filed: May 13, 2005
    Date of Patent: August 5, 2008
    Assignee: Coverity, Inc.
    Inventor: Kevin Wade Jameson
  • Patent number: 7340726
    Abstract: Systems and methods are provided for performing static error analysis on source code. A computer system having an operating system may contain a number of source code files. During a normal build process, a build program may be used to set various compilation options and to invoke appropriate compilers that compile the source code files into executable code. Static analysis debugging tools may be used to perform static analysis on the source code files. The appropriate static analysis tools may be invoked using a static analysis tool management program. Directory, path and name modification may be used to invoke the analysis tools. A monitoring program may be used to determine how to invoke the tools. The operating system may be modified so that the static analysis tools are invoked in place of the compilers when the build program is run.
    Type: Grant
    Filed: August 8, 2003
    Date of Patent: March 4, 2008
    Assignee: Coverity, Inc.
    Inventors: Benjamin E. Chelf, Seth A. Hallem, Andy C. Chou