{"id":170,"date":"2020-12-14T17:38:50","date_gmt":"2020-12-14T17:38:50","guid":{"rendered":"https:\/\/fde.cat\/index.php\/2020\/12\/14\/infer-powering-microsofts-infer-a-new-static-analyzer-for-c\/"},"modified":"2021-02-02T13:44:38","modified_gmt":"2021-02-02T13:44:38","slug":"infer-powering-microsofts-infer-a-new-static-analyzer-for-c","status":"publish","type":"post","link":"https:\/\/fde.cat\/index.php\/2020\/12\/14\/infer-powering-microsofts-infer-a-new-static-analyzer-for-c\/","title":{"rendered":"Infer powering Microsoft\u2019s Infer#, a new static analyzer for C#"},"content":{"rendered":"

What it is:<\/span><\/h2>\n

Infer# brings the <\/span>Infer static analysis platform<\/span><\/a> to developers who use Microsoft\u2019s <\/span>C#<\/span><\/a> programming language. It can already detect null-pointer dereference and resource leak bugs, thanks to <\/span>bi-abduction analysis<\/span><\/a>. Detection of race conditions based on <\/span>RacerD analysis<\/span><\/a> is also in the works. Infer# has been used to analyze Microsoft software, including Roslyn, DotNET SDK, ASP.NET Core, and MSBuild.<\/span><\/p>\n

Infer# was first <\/span>presented at the Infer Practitioners workshop<\/span><\/a>, colocated with<\/span> PLDI 2020<\/span><\/a>.<\/span><\/p>\n

Read more about Infer#<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

What it does:<\/span><\/h2>\n

It provides a new language front end for C# in Infer. A new Infer front end is no small feat: It\u2019s essentially a compiler from the source language (in this case, the .NET bytecode for C#) to Infer\u2019s own intermediate language, called SIL. Infer analyses can then be reused for the new language with minimal adaptation, as they analyze SIL and not the source language itself.<\/span><\/p>\n

It also introduces a new language-independent JSON layer to represent SIL, opening the door to more Infer front ends for other programming languages in the future.<\/span><\/p>\n

Why it matters:<\/span><\/h2>\n

While there are several open source static analyzers for C# to choose from, they typically are not able to find the deep <\/span>inter-procedural bugs<\/span><\/a>, such as null dereferences, data races, or resource leaks, that Infer is able to find in languages like Java or C++. Infer# brings scalable, automated, and interprocedural <\/span>Infer<\/span><\/a> analyses to the .NET platform.<\/span><\/p>\n

Get it on GitHub:<\/span><\/h2>\n

Infer#<\/span><\/a><\/p>\n

The post Infer powering Microsoft\u2019s Infer#, a new static analyzer for C#<\/a> appeared first on Facebook Engineering<\/a>.<\/p>\n

Read More<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

What it is: Infer# brings the Infer static analysis platform to developers who use Microsoft\u2019s C# programming language. It can already detect null-pointer dereference and resource leak bugs, thanks to bi-abduction analysis. Detection of race conditions based on RacerD analysis is also in the works. Infer# has been used to analyze Microsoft software, including Roslyn,… Continue reading Infer powering Microsoft\u2019s Infer#, a new static analyzer for C#<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":""},"categories":[1,7],"tags":[],"class_list":["post-170","post","type-post","status-publish","format-standard","hentry","category-external","category-technology","entry"],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":728,"url":"https:\/\/fde.cat\/index.php\/2023\/06\/27\/meta-developer-tools-working-at-scale\/","url_meta":{"origin":170,"position":0},"title":"Meta developer tools: Working at scale","date":"June 27, 2023","format":false,"excerpt":"Every day, thousands of developers at Meta are working in repositories with millions of files. Those developers need tools that help them at every stage of the workflow while working at extreme scale. In this article we\u2019ll go through a few of the tools in the development process. And, as\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":554,"url":"https:\/\/fde.cat\/index.php\/2022\/03\/15\/vespa-static-profiling-for-binary-optimization\/","url_meta":{"origin":170,"position":1},"title":"VESPA: Static profiling for binary optimization","date":"March 15, 2022","format":false,"excerpt":"What the research is: Recent research has demonstrated that binary optimization is important for achieving peak performance for various applications. For instance, the state-of-the-art BOLT binary optimizer developed at Meta, which is part of the LLVM Compiler Project, significantly improves the performance of highly optimized binaries produced using compilers\u2019 most\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":548,"url":"https:\/\/fde.cat\/index.php\/2022\/03\/08\/an-open-source-compositional-deadlock-detector-for-android-java\/","url_meta":{"origin":170,"position":2},"title":"An open source compositional deadlock detector for Android Java","date":"March 8, 2022","format":false,"excerpt":"What the research is: We\u2019ve developed a new static analyzer that catches deadlocks in Java code for Android without ever running the code. What distinguishes our analyzer from past research is its ability to analyze revisions in codebases with hundreds of millions of lines of code. We have deployed our\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":492,"url":"https:\/\/fde.cat\/index.php\/2021\/10\/20\/facebook-engineers-receive-2021-ieee-computer-society-cybersecurity-award-for-static-analysis-tools\/","url_meta":{"origin":170,"position":3},"title":"Facebook engineers receive 2021 IEEE Computer Society Cybersecurity Award for static analysis tools","date":"October 20, 2021","format":false,"excerpt":"Until recently, static analysis tools weren\u2019t seen by our industry as a reliable element of securing code at scale. After nearly a decade of investing in refining these systems, I\u2019m so proud to celebrate our engineering teams today for being awarded the IEEE Computer Society\u2019s Cybersecurity Award for Practice for\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":656,"url":"https:\/\/fde.cat\/index.php\/2022\/11\/22\/retrofitting-null-safety-onto-java-at-meta\/","url_meta":{"origin":170,"position":4},"title":"Retrofitting null-safety onto Java at Meta","date":"November 22, 2022","format":false,"excerpt":"We developed a new static analysis tool called Nullsafe that is used at Meta to detect NullPointerException (NPE) errors in Java code. Interoperability with legacy code and gradual deployment model were key to Nullsafe\u2019s wide adoption and allowed us to recover some null-safety properties in the context of an otherwise\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":263,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/minesweeper-automates-root-cause-analysis-as-a-first-line-defense-against-bugs\/","url_meta":{"origin":170,"position":5},"title":"Minesweeper automates root cause analysis as a first-line defense against bugs","date":"August 31, 2021","format":false,"excerpt":"Root cause analysis (RCA) is an important part of fixing any bug. After all, you can\u2019t solve a problem without getting to the heart of it. But RCA isn\u2019t always simple, especially at a scale like Facebook\u2019s. When billions of people are using an app on a variety of platforms\u2026","rel":"","context":"In "Technology"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/comments?post=170"}],"version-history":[{"count":1,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/170\/revisions"}],"predecessor-version":[{"id":213,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/170\/revisions\/213"}],"wp:attachment":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/media?parent=170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/categories?post=170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/tags?post=170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}