BoundsChecker

BoundsChecker
Developer(s)	Micro Focus
Stable release	11.3 / July 2015
Operating system	Windows
Type	Profiler / Memory debugger
License	Proprietary software
Website

BoundsChecker is a memory checking and API call validation tool used for C++ software development with Microsoft Visual C++. It was created by Nu-Mega Technologies in the early 1990s. When Nu-Mega was purchased by Compuware in 1997, BoundsChecker became part of a larger tool suite, DevPartner Studio. Micro Focus purchased the product line from Compuware in 2009.^[1] Comparable tools include Purify, Insure++ and Valgrind.

BoundsChecker may be run in two distinct modes: ActiveCheck, which will work against any application as is, or FinalCheck, which makes use of instrumentation added to the application when it is built.

ActiveCheck performs a less intrusive analysis and monitors all calls by the application to the C Runtime Library, Windows API and calls to COM objects. By monitoring memory allocations and releases, it can detect memory leaks and overruns. Monitoring API and COM calls enables ActiveCheck to check parameters, returns and exceptions and report exceptions when they occur. Thread deadlocks can also be detected by monitoring of the synchronization objects and calls giving actual and potential deadlock detection.

FinalCheck requires an instrumented build and gives a much deeper but more intrusive analysis. It provides all of the detection features of ActiveCheck plus the ability to detect buffer overflows (read and write) and uninitialized memory accesses. It monitors every scope change, and tracks pointers referencing memory objects.

General Functionality

Leak Detection

Memory Tracking - Memory allocation and release is tracked over the life of the application, and an end-of-session report is generated showing which blocks of memory allocated by user code remain allocated at the time of a normal process termination. When compiler instrumentation is used, some memory leaks can be announced earlier, when the last pointer referring to an allocated block memory goes out of scope or gets overwritten by another value. Through the same mechanisms, attempts to use pointers to previously released memory are reported.
COM Object Tracking - COM object creation and destruction is tracked over the life of the application, and an end-of-session report is generated showing which objects remain active at the time of a normal process termination.
Resource Tracking - The creation and destruction of system object handles (like file handles, GDI handles and so on) is monitored, and an end-of-session report is generated showing which handles remain at the time of a normal process termination.

API Call Validation

API calls are monitored, their input parameters verified before the function calls are actually performed, warning of possible problems. The API return codes are also monitored, and error codes are logged. Such validation is limited to such APIs as are known to BoundsChecker, currently several thousand in number. If Memory Tracking is enabled, API Call Validation can make use of the information gathered for more precise validation of memory pointers.

Memory Overrun Detection

When both memory tracking and API validation are enabled, it becomes possible to detect many kinds of array and buffer overrun conditions. Compiler instrumentation enhances this ability. This is the feature for which the product was originally named.

API Call Logging

API, COM method and .NET Interop function calls can be logged in detail, noting the call parameter values and the resulting return values. This feature is limited in value, as non-trivial applications often result in the session log quickly becoming too large.

.NET Analysis

A report can be generated analyzing .NET Interop, garbage collection and finalizer activity over the life of the process under test.

Deadlock Analysis

Certain kinds of deadly embraces and other such lockups can be detected.

Compatibility

The current version (11.3.0) of BoundsChecker supports 32-bit and 64-bit native applications on Windows XP through Windows 10. MS-DOS, 16-bit Windows and Windows 2000 applications are no longer supported. Support for .NET or mixed mode (combined .NET and native) applications is relatively limited, and restricted to X86 (32-bit) applications. As part of DevPartner Studio, the product integrates with Visual Studio 2005 SP1, 2008 SP1, 2010 SP1, 2012 Update 4, 2013 Update 4 and 2015.^[2]

As of July 2015, the .NET Analysis, .NET Call Reporting and Deadlock Analysis features are not yet supported in X64 applications.

Criticisms

Licensing - Since the takeover by Micro Focus International, the suite has attracted criticism due to the increasingly awkward licensing mechanisms that need to be dealt with when installing and using it. For example, every single review on the online store site selling the product (apart from one submitted by one of its developers) describes the product as effectively unusable due to the way licensing is handled.^[3]

Speed - This is a relatively intrusive tool, and can slow the application under test anywhere from 50 to 300 times. The more of the features you use at a time, the slower it gets. This is particularly true when using compiler instrumentation.
Currency - Though the product works with many versions of Windows and of Microsoft Visual Studio, the API validation database has not been added to significantly since 2006. Newer APIs are generally not monitored.
Portability - Only Microsoft Windows and Microsoft Visual Studio are supported. There is no support for other operating systems nor compilers.
Noise - Many results are reported that, while valid, are not very useful. The most common of these kinds of things are API error returns. It is perfectly normal to have certain API calls fail. These kinds of results can be suppressed, however.

Version History

11.3 - Jul 2015 - Support for Windows 10 and Visual Studio 2015.
11.2 - Jan 2014 - Support for Windows 8.1, Windows 8.0 and Visual Studio 2013.
11.1 - Apr 2013 - Chinese localization (excluding on-line help). Various bug fixes.
11.0 - Sep 2012 - Full Visual Studio 2012 support, improved performance and accuracy.
10.6 - Apr 2012 - New licensing model, product update checker, preliminary support for Visual Studio 2012, and system tray tool with activity monitor.
10.5 - Feb 2011 - Supports X64 applications on Windows Vista X64 and later.
10.0 - Apr 2010 - Supports Visual Studio 2010.
9.1 - Oct 2009 - Supports Windows 7.
9.0 - Sep 2008 - Supports Visual Studios 2005 & 2008.
8.2 - May 2007 - Last version with full support for Visual Studio 6.0 and Visual Studio .NET 2003.
6.0 - 1998 - First version after acquisition of NuMega by Compuware.
5.0 - Mar 1997
4.0 - 1996 - Introduced API Validation feature.
2.0 for DOS - Mar 1991^[4]

References

This article is issued from Wikipedia - version of the Monday, February 01, 2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.