Welcome to MSDN Blogs Sign in | Join | Help

New Code Analysis Features in Visual Studio 2010 September '08 CTP

At this year's PDC, Microsoft released Visual Studio 2010 September '08 CTP (Community Technology Preview). This CTP is available as a Virtual PC (VPC) image which can be downloaded at http://go.microsoft.com/fwlink/?LinkId=129231. The goal of the Community Technology Preview is to obtain feedback from our customers on the new scenarios we have enabled.  If you are interested in code analysis, you need to get this CTP and here is why.

The code analysis team is excited to share with you new code analysis features and rules in this CTP, including:

  • Rule sets - code analysis can now be configured much more quickly and easily with sets of rules that are targeted at specific scenarios or areas of emphasis

  • Enhanced policy support - enforce your rule set with the code analysis check-in policy

  • 8 New Data Flow rules - find hard-to-detect flaws with these advanced dataflow rules for managed code; including certain SQL injection vulnerabilities

Included with the CTP is a walkthrough guide.  Inside the walkthrough is a section dedicated to these exciting code analysis scenarios.  Over the next couple of weeks we will continue to blog about rule sets, policy support, and data flow rules so be sure to come back after you get the CTP.

Now go get the CTP and starting sending us your feedback! http://go.microsoft.com/fwlink/?LinkId=129231

 

 

Published Thursday, October 30, 2008 6:05 PM by cristend

Comments

Friday, October 31, 2008 2:10 PM by Jason Bock

# Testing Custom Rules

OK, 2 questions :) -

1) Are the rules APIs public? IOW is it now much easier to create custom rules?

2) Are custom rules testable under unit testing frameworks? Right now it's basically "impossible" (from what I've been able to gather) - the best way to test custom rules is to run them under VS or FxCop manually, which is less than ideal. Has this changed?

Thanks,

Jason Bock

Sunday, November 02, 2008 8:26 PM by Tom Marsh MSFT

# re: New Code Analysis Features in Visual Studio 2010 September '08 CTP

The rule APIs are not available as a public SDK in the CTP release. We are still working on these and hoping to get them in for RTM, but it's going to be tight. Having a good unit testing story for rules is also part of our goal with the public SDK.

Tom

New Comments to this post are disabled
 
Page view tracker