Support of Visual Basic .NET in SharpChecker static analyzer

V. S. Karcev^ab, V. N. Ignatyev<sup>ac

a</sup> Ivannikov Institute for System Programming of the RAS
^b Moscow Institute of Physics and Technology (National Research University), Dolgoprudny, Moscow Region
^c Lomonosov Moscow State University

Abstract: This paper presents the implementation of static analysis for Visual Basic .NET (VB.NET) within the industrial tool SharpChecker. Leveraging the Roslyn compiler framework, VB.NET analysis was integrated into SharpChecker, enabling static code analysis for VB.NET projects. The process involved building support for VB.NET projects, creating a comprehensive test suite, implementing a source code indexer, and adapting existing analyzers to support VB.NET syntax nodes and operations. Evaluation of translated tests and real-world projects demonstrated production-acceptable analysis quality, paving the way for improved maintenance of VB.NET projects. Additionally, the study highlighted SharpChecker’s capability for cross-language analysis, showcasing its ability to handle mixed C# and VB.NET projects efficiently.

Keywords: static code analysis, vulnerabilities detection, VB.NET

Language: English

DOI: 10.15514/ISPRAS-2024-36(3)-4