Welcome to MSDN Blogs Sign in | Join | Help

Michael Howard's Web Log

A Simple Software Security Guy at Microsoft!
PREfast, SAL and the Windows SDK

In a prior article I wrote about the benefits of the Standard Annotation Language (SAL) available in various high-end versions of Visual Studio 2005. The good news is the Windows SDK released for Windows Vista Beta 2, also includes PREfast and can therefore take advantage of the SAL-annotated CRT and Windows SDK headers. Viz:

PS C:\Program Files\Microsoft SDKs\Windows\v1.0\VC\Bin> ./cl –help

Microsoft (R) 32-bit C/C++ Optimizing Compiler Version 14.00.50727.42 for 80x86Copyright (C) Microsoft Corporation. All rights reserved.

C/C++ COMPILER OPTIONS

<snip>

-CODE ANALYSIS-

/analyze[:WX-] enable code analysis

WX- - code analysis warnings should not be treated as errors even if /WX is invoked

I’m told that PREfast was also included in the Windows SDK February 2006 CTP release, but I have not verified it.

Finally, as you probably know by now, we wrapped up Windows Vista beta 2 today, so I would wait for the beta 2 SDK to come out anyway!

Posted: Tuesday, May 23, 2006 10:24 AM by michael_HOWARD
Filed under:

Comments

Alun Jones said:

Wonderful news! It's a shame that, although I have exactly the same version of CL in my Visual Studio 2005, it doesn't come with PREFast. That makes me wonder if PREFast is a DLL I can add to my installation, or if I have to download the whole Vista SDK.
# May 23, 2006 5:38 PM

Alun Jones said:

Will this be available in the final release?  I can't remember if VS2005 also had /analyze in the beta, but I'd really like to work with software that is going to last.
# May 23, 2006 9:03 PM

Kernel Mustard » Blog Archive » See, I told you so. :-) said:

PingBack from http://kernelmustard.com/2006/05/23/see-i-told-you-so-2/
# May 23, 2006 11:02 PM

Tales from the Crypto said:

Okay, so for the foreseeable future at least, SAL (and other code analysis goodness) is indeed available...
# May 28, 2006 12:43 PM

Michael Howard's Web Log said:

A couple of people have asked about the relationship between /GS, SAL and ASLR in Windows Vista. Here’s...
# June 12, 2006 10:44 AM

Nein said:

Hey Michael, do you know if the version of PREfast included in the Windows SDK released for Windows Vista Beta 2 is a beta or release version?
# June 12, 2006 4:36 PM

michael_HOWARD said:

Technically it's beta - but it's the same tool we use on Vista :)
# June 12, 2006 5:33 PM

Robert Burke's Weblog said:

&amp;nbsp;




Web Resources



&amp;nbsp;

[Default] Game Developers: Make Contact in Seattle
August...
# June 19, 2006 9:23 AM

Kernel Mustard » Blog Archive » Code analysis with Visual C++ Express Edition said:

PingBack from http://kernelmustard.com/2006/10/08/code-analysis-with-visual-c-express-edition/

# October 9, 2006 12:21 AM
New Comments to this post are disabled
Page view tracker