Using static code analysis to enhance automated system for assessment of software

Dinamička analiza programskog koda i statička analiza programskog koda su dvije različite metode za analizu programskog koda. Dinamička analiza programskog koda provodi se izvršavanjem programa i koristi se za pronalaženje grešaka kao što su greške u radu s memorijom, greške u logici programa, neispravno ponašanje programa u specifičnim uvjetima itd. Statička analiza programskog koda provodi se bez izvršavanja programa i temelji se na analizi izvornog koda. U radu su analizirani postojeći alati i programska podrška za statičku analizu koda. Odabran je pristup analize korištenjem apstraktnog sintaksnog stabla za statičku analizu koda kao nadopuna i nadogradnja postojećoj metodi dinamičke analize koda u sustavu za ocjenjivanje koda. U sklopu rada razvijen je takav sustav koji podržava analizu i ocjenjivanje zadataka u proceduralnom jeziku C kao i u neproceduralnom jeziku SQL.Dynamic code analysis and static code analysis are two different methods for analyzing code. Dynamic code analysis is performed by executing the program and is used to find errors such as memory-related errors, program logic errors, incorrect program behavior under specific conditions, etc. Static code analysis is performed without executing the program and is based on analysis of the source code. This work analyzed existing tools and software for static code analysis. The approach of using abstract syntax trees for static code analysis was chosen as a complement and upgrade to the existing method of dynamic code analysis in the code assessment system. A system that supports the analysis and assessment of tasks in the procedural language C, as well as in the non-procedural language SQL was implemented to demonstrate the concepts in this paper