The art of static code analysis
summary
Builds a simple Java static-analysis tool using Eclipse JDT and JavaParser, plus parser generators ANTLR and JavaCC for background, and shows concrete results: parsing a sample Multiset class, counting 20 methods, flagging one bad method name (createThreadPool) and detecting missing null checks for a count parameter. Demonstrates AST walking, visitors/listeners, symbol-resolution differences, Java 21 support, and that both libraries produce equivalent findings with different bootstrapping effort.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker intro
- 0:48Why use static analysis
- 3:17Parsing source code basics
- 8:35Parser generators overview
- 13:38Language-specific parsing libraries
- 18:42Java parser and Eclipse JDT
- 25:50Practical code analysis examples
- 34:03Use cases and Q&A
related talks
38mStatic Code Analysis - A Behind-the-scenes Look
42mAn Opinionated Overview on Static Analysis for Java
41mUsing Byte Code Analysis to Modernize Your Java EE Applications
44mUsing Static Analysis Tools to Become A Superhero Programmer
47mHow Code Analyzers Find Bugs and Security Defects
17mDynamic and Static Code Analysis for Java Programs on Heterogeneous Hardware
48mAgent-Agnostic Guardrails: Universal Java Code Quality with AGENTS.MD and Static Analysis
35mJava Source to Byte Code Transformation - The Hidden Story!