Source code diagnostic instrument
A computer-implemented consolidation method is provided for identifying software vulnerability anomalies in a source code. This method includes providing a plurality of diagnostic tools; receiving the source code; selecting a subset plurality of tools; scanning the source code by the subset plurality for the anomalies to produce a diagnostic output; sorting the output by removing anomaly duplicates into a report; and saving the report into memory. Each tool among the plurality is able to detect the anomalies in software.
1. A computer-implemented consolidation method identifying software vulnerability anomalies in a source code, said method comprising: providing a plurality of diagnostic tools, each tool of said plurality able to detect at least one anomaly of the anomalies in the source code;
receiving the source code;
selecting a subset plurality of tools from said plurality of diagnostic tools;
scanning the source code by said subset plurality for the anomalies to produce a diagnostic output;
wherein said subset plurality of tools includes first and second tools, and the anomalies include first and second errors determined respectively by said first and second tools, so as further comprising: assigning said duplicate as said second error for removal under condition that said second error is identical to said first error;
sorting said output by removing a duplicate of said anomaly of the anomalies into a report; and
saving said report into memory.
2. The method according to claim 1 , further comprising:
providing a default list and a custom list from said plurality of error diagnostic tools;
prompting an input from among one of said default and custom lists; and
assigning said input for said subset plurality of tools.
3. The method according to claim 1 , further comprising: displaying said report on a screen monitor.
4. The method according to claim 1 , wherein saving said report into memory further includes writing said report to a file.
5. The method according to claim 1 , wherein said subset plurality of tools includes distinguishing between source code languages.
6. The method according to claim 2 , wherein said custom list has at least one tool of said plurality of error diagnostic tools that corresponds to a code language.
7. The method according to claim 2 , wherein said custom list has at least one tool of said plurality of error diagnostic tools that corresponds to C/C++.
8. The method according to claim 2 , wherein said custom list has at least one tool of said plurality of error diagnostic tools that corresponds to Java.
9. The method according to claim 1 , wherein said sorting said output further includes parsing text from said output.