DETECTING PROGRAMMING FLAWS IN STUDENT SUBMISSIONS WITH STATIC SOURCE CODE ANALYSIS
DOI:
https://doi.org/10.24193/subbi.2023.1.03Keywords:
static code analysis, C , C#, student submission, computer science education, programming flaw.Abstract
Static code analyzer tools can detect several programming mistakes, that would lead to run-time errors. Such tools can also detect violations of the conventions and guidelines of the given programming language. Thus, the feedback provided by these tools can be valuable for both students and instructors in computer science education. In our paper, we evaluated over 5000 student submissions from the last two years written in C++ and C# programming languages at Eötvös Loránd University, Faculty of Informatics (Budapest, Hungary), by executing various static code analyzers on them. From the findings of the analyzers, we highlight some of the most typical and serious issues. Based on these results, we argue to include static analysis of programming submissions in automated and assisted semi-automatic evaluating and grading systems at universities, as these could increase the quality of programming assignments and raise the attention of students on various otherwise missed bugs and other programming errors.
References
Babati, B., Horváth, G., Májer, V., and Pataki, N. Static analysis toolset with Clang. In Proceedings of the 10th International Conference on Applied Informatics (2017), pp. 23–29.
Bardas, A. G., et al. Static code analysis. Journal of Information Systems & Operations Management 4, 2 (2010), 99–107.
Birillo, A., Vlasov, I., Burylov, A., Selishchev, V., Goncharov, A., Tikhomirova, E., Vyahhi, N., and Bryksin, T. Hyperstyle: A tool for assessing the code quality of solutions to programming assignments. In Proceedings of the 53rd ACM Technical Symposium on Computer Science Education V. 1 (New York, NY, USA, 2022), SIGCSE 2022, Association for Computing Machinery, pp. 307–313.
Blau, H., and Moss, J. E. B. Frenchpress gives students automated feedback on java program flaws. In Proceedings of the 2015 ACM Conference on Innovation and Technology in Computer Science Education (New York, NY, USA, 2015), ITiCSE ’15, Association for Computing Machinery, pp. 15-20.
Clang Team. LLVM - Clang-tidy - cppcoreguidelines-slicing. https://releases.llvm.org/13.0.0/tools/clang/tools/extra/docs/clang-tidy/checks/cppcoreguidelines-slicing.html, Accessed: 2023-02-25.
Edwards, S. H., Kandru, N., and Rajagopal, M. B. Investigating static analysis errors in student java programs. In Proceedings of the 2017 ACM Conference on International Computing Education Research (New York, NY, USA, 2017), ICER ’17, Association for Computing Machinery, pp. 65-73.
ELTE. TMS – Task Management System. https://tms-elte.gitlab.io/, Accessed: 2023-02-27.
Ericsson Ltd. CodeChecker. https://codechecker.readthedocs.io/, Accessed: 2023-02-25.
Eurostat. ICT education - a statistical overview. https://ec.europa.eu/eurostat/statistics-explained/index.php?title=ICT education - a statistical overview, Accessed: 2023-04-16.
Gomes, I., Morgado, P., Gomes, T., and Moreira, R. An overview on the static code analysis approach in software development. Faculdade de Engenharia da Universidade do Porto, Portugal (2009).
Ihantola, P., Ahoniemi, T., Karavirta, V., and Seppälä, O. Review of recent systems for automatic assessment of programming assignments. In Proceedings of the 10th Koli Calling International Conference on Computing Education Research (New York, NY, USA, 2010), Koli Calling ’10, Association for Computing Machinery.
Keuning, H., Heeren, B., and Jeuring, J. Code quality issues in student programs. In Proceedings of the 2017 ACM Conference on Innovation and Technology in Computer Science Education (New York, NY, USA, 2017), ITiCSE ’17, Association for Computing Machinery, pp. 110-115.
Kremenek, T. Finding software bugs with the clang static analyzer. Apple Inc (2008).
Loyalka, P., Liu, O. L., Li, G., Chirikov, I., Kardanova, E., Gu, L., Ling, G., Yu, N., Guo, F., Ma, L., Hu, S., Johnson, A. S., Bhuradia, A., Khanna, S., Froumin, I., Shi, J., Choudhury, P. K., Beteille, T., Marmolejo, F., and Tognatta, N. Computer science skills across China, India, Russia, and the United States. Proceedings of the National Academy of Sciences 116, 14 (2019), 6732–6736.
Marjam¨aki, D. Cppcheck. https://cppcheck.sourceforge.io/, Accessed: 2023-02-23.
Martignano, M., and Spazio, I. A new static analyzer: The compiler. ADA USER 40, 2 (2019), 99–103.
Microsoft. Async return types (C#). https://learn.microsoft.com/en-us/dotnet/csharp/asynchronous-programming/async-return-types, Accessed: 2023-02-23.
Molnar, A.-J., Motogna, S., and Vlad, C. Using static analysis tools to assist student project evaluation. In Proceedings of the 2nd ACM SIGSOFT International Workshop on Education through Advanced Software Engineering and Artificial Intelligence (New York, NY, USA, 2020), EASEAI 2020, Association for Computing Machinery, pp. 7–12.
Orr, J. W. Automatic assessment of the design quality of student python and java programs. arXiv e-prints (2022).
Porkolab, Z., Brunner, T., Krupp, D., and Csordas, M. Codecompass: an open software comprehension framework for industrial usage. In Proceedings of the 26th Conference on Program Comprehension (2018), pp. 361–369.
Quinlan, D., Vuduc, R., Panas, T., Haerdtlein, J., and Saebjoernsen, A. Support for whole-program analysis and the verification of the one-definition rule in C++. In Static Analysis Summit 2006 (6 2006).
Striewe, M., and Goedicke, M. A review of static analysis approaches for programming exercises. In Computer Assisted Assessment. Research into E-Assessment (07 2014), vol. 439, Springer, pp. 100–113.
Sundstrom, J. Assessment of Roslyn analyzers for Visual Studio, 2019. [24] Vasani, M. Roslyn Cookbook. Packt Publishing Ltd., 2017.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2023 Studia Universitatis Babeș-Bolyai Informatica
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
