Open Source Windows Source Code Analysis Tools

Diff-ext is an extension for filemanagers such as Windows Explorer and Nautilus that allows to launch diff/merge tools on selected files.

qpt (Qt Project Tool) understands Qt C++ projects (.pro) and allows to pass this information to command line tools as "Code Counters" and "Static Analysis tools". It also can used inside QtCreator to act as a plugin for "Static Analysis tools" putting reported issues into QtCreator issues pane.

WAP automatic detects and corrects input validation vulnerabilities in web applications written in PHP Language (version 4.0 or higher) and with a low rate of false positives. WAP detects the following vulnerabilities: - SQL injection using MySQL, PostgreSQL and DB2 DBMS - Reflected cross-site scripting (XSS) - Stored XSS - Remote file inclusion - Local file inclusion - Directory traversal - Source code disclosure - OS command injection - PHP code injection WAP is a static analysis tool that performs taint analysis to detect vulnerabilities, tracking malicious users inputs and checking if they reach calls of sensitive functions. It has a low rate of false positives because has implemented a data mining module to predict false positives when detects vulnerabilities. The output of the tool is: - shows the vulnerabilities found and how they are corrected - new files with the corrections

This project has moved to GitHub ! The version here at SourceForge will remain for historic purpose. Koopa is a parser generator, made for COBOL. It can handle source files in isolation (no preprocessing required) and doesn't mind the presence of CICS/SQL fragments. The grammar is easily extensible in a way which minimizes the impact on the overall code.

CvsChangelogBuilder is an utility to generate advanced, differential and/or graphical changelogs, for a project hosted on a CVS server (CVS change log). It provides a better output than the 'cvs log' command, and accept a lot of options.

The purpose of the project is generating a function call tree for a software application written in C. This utility takes as input an uncompressed CScope (http://cscope.sourceforge.net/) output file. With a few options, an output DOT language file can be generated. The DOT file may be used as input for Graphviz (http://www.graphviz.org/) to make an image of the function call tree (see screenshot examples for tceetree run over its sources). For more information, see the Wiki page.

This is a simple, modular PHP class designed to record execution time benchmarks throughout different parts of a script. Compatible with virtually any PHP script, the code can be added/removed quickly and with ease. Accurate to the microsecond.

CesTa (Code Enhancing Security Transformation and Analysis) is a tool for enhancing security by program transformations. Focused on Smart Cards (Java Card in particular), powered by Ant, ANTLR and StringTemplates.

A GUI tool for easily setting up and maintaining PC-Lint for your projects.

jUML is a UML diagram application capable of reverse engineering Java source code to create relationship diagrams, source code generation based on a user created UML diagram, and saving/restoring of jUML projects.

This anonymous emailer script written in PHP is a free, opensource project designed to send EMails from anyone to anyone, with additional details such as Reply-To ,an anti-spam CAPTCHA and a WYSIWYG.

Flowcharts not telling you what you want to know about some C source code? Try a State Dependency map! Every C source file is an implemention of a state machine. Implicit in the definition of a state machine is a network of dependencies between the states. The Automalator * deconstructs the C code into the core state machine * collates the transactions into the dependency net * generates a diagram-format file with the states and dependencies as the nodes and edges. Pre-requisites * Perl - tested with versions 5.12.3, 5.14.2 and 5.20.2, Windows, Linux and MAC * Get the Automalator by downloading the zip, or checking out or exporting the SVN trunk * copy the source code of interest into "project.c" * windows - double-click "src2map.bat" * linux & MAC - navigate the command line to the "project" folder, then run "src2map.sh" * open "project.gml" file with diagramming software.

BPUtils is a Sterling Integrator BP file manipulation program. It features : - XPath expressions control : BPUtils checks that the XPath expressions defined in the BP file are correct - Consistency control : Controls that the sequences and the on faults are named in a correct way - Auto layout formatting : Formats automatically your BP layouts ! - BP tree printing : BPUtils is able to print to the console standard output the BP tree - BP dependencies analysis : Get the list of service configurations used by the BP And, implements your own functionality by using the Java BPUtils library ! BP loading from : - single BP file - XML resource export file - Automatic BP check out from server

A query language for code browsing. You query your database-- why don't you query your code? Write queries to provide custom views of your Java or C#/CLR code base. Integrates with popular IDEs or standalone.

An easy to use API for documenting PHP (>= 5.3) projects. It follows a strict structure and originally, it was only written for the Buxa Framework. The documentor mainly uses reflection and yes... of course, it supports the namespace stuff.

ChkSem is a static Fortran 90 and C++ source code analyser. Fortran codes are analysed to find potential problems and dead code. This project allows ( for the moment ) to find useless includes and to find missing direct includes for helping programmers to clean C++ codes. This can potentially reduce building time from small programs to huge solutions. This tool is not finalized and new versions will follow, with a GUI with even more features. The project is written in Java to ensure cross-platform compatibility.

Code Search and Replace is a tool for finding and replacing code blocks within a group of files. Avoid tediously changing each page and modify all pages in a selected folder at a time. Quickly and efficiently modify your files and get back to work.

CodeConics is simple, intuitive, easy to use and debug code-manipulation solution, that is grammar independent and recursion based, as opposed to other DFA(Deterministic Finite-state Automata) based solutions.

You are searching _CrtDumpMemoryLeaks(), _CrtSetReportMode() and all the well known Win32 stuff? But you don't find it for your Windows CE or Windows Mobile native C or C++ development? Get tired of Memory Leaks? Handle Leaks? Trouble with Appverify (Application Verifier for WinCE)? Stop searching. Congratulations, you got it!

This is a windows version of my Linux disassembler. It is an old version, no where as good as the Linux version.

EnDecode is a tool to decode/decompress parts of a binary file like PDF. If using PDF then stream to endstream data can be decompressed. You select from start to end of the part you want to decode and it will decode the data.

A static checker that model checks the implementation of equality for an Eclipse Java Project.

ExplorViz is a web-based software visualization for large software landscapes. It features two different perspectives: the landscape-level perspective and the application-level perspective. The former visualizes the systems, nodes, and application existing in the software landscape. The latter one utilizes the city metaphor to visualize the entities and communication happening in one application. For installation instructions and downloads see http://www.explorviz.net

Very simple application that search files in a given directory, and counts its extension, in lines, characters, characters per line, lines per file, etc. The file extensions can be filtered easyly.

JLineCounter is a tiny tool written in java for counting lines in a text file. text files may be source files like c,java,csharp etc.