Projects where we found errors with the PVS-Studio analyzer

• Operating and Embedded systems
• Microsoft projects
• Web Browsers
• GameDev
• Compilers
• Programming languages
• Development
• Libraries
• Graphics
• Music Software
• Messengers
• Other projects

The PVS-Studio team finds errors in open-source projects and describes them in articles. Here are the pros of finding bugs in various projects:

• projects' authors get the analysis results from us and learn about the errors. Bug fixing may enhance the project's code quality;
• readers of the articles find out about the quality of software they use. Let's not forget about the educational aspect here. Learning from other people's mistakes helps avoid our own failures — forewarned is forearmed;
• we show the PVS-Studio analyzer's capabilities with practical examples.

We keep all the errors found and add them into our bug list. This list shows what kind of defects were detected in projects.

Do you want to offer us a project for analysis? Create a pull request on GitHub.

Here is a list of projects that we checked so far. The following links lead to articles with detailed description of defects we found in projects.

Operating and Embedded systems

• MuditaOS analysis: part 1 (February 2022), part 2 (February 2022)
• Flipper Zero analysis (December 2021)
• Linux kernel analysis (January 2015), second analysis (December 2016), third analysis (August 2021)
• Apple XNU kernel analysis (March 2018), second analysis (March 2021)
• Embox kernel analysis (Aprils 2020)
• Zephyr OS analysis (April 2020)
• Amazon FreeRTOS analysis (October 2019)
• Haiku OS analysis: part 1, part 2 (April 2015), second analysis: part 1, part 2, part 3 (July 2019)
• Mbed OS analysis (October 2018)
• Android analysis (August 2018)
• RT-Thread IoT OS analysis (March 2018)
• Tizen OS analysis: part 1, part 2, part 3 (July 2017)
• FreeBSD analysis (February 2016), second analysis (April 2017)
• ReactOS analysis (September 2011), second analysis (April 2013)

Microsoft projects

• .NET 8 analysis (December 2023)
• Microsoft PowerToys check (November 2023)
• Entity Framework Core analysis (October 2023)
• .NET 7 analysis (December 2022)
• ML.NET analysis (September 2022)
• MSBuild analysis (August 2016), second analysis (September 2022)
• .NET 6 analysis (December 2021)
• Open XML SDK analysis (November 2020)
• SARIF SDK analysis (December 2019)
• Azure SDK for .NET analysis (December 2019)
• Azure PowerShell analysis (October 2019)
• Roslyn Analyzers analysis (August 2019)
• .NET Core Libraries (CoreFX) analysis (December 2015), second analysis (August 2019)
• Windows Forms analysis (August 2019)
• .NET Compiler Platform ("Roslyn") analysis (December 2015), second analysis (April 2019)
• Windows Calculator analysis (March 2019)
• Infer.NET analysis (November 2018)
• Azure Service Fabric analysis (April 2018)
• This one is not open-source, but still useful to everyone. Visual C++ libraries analysis (September 2012), second analysis (October 2014), third analysis (May 2017)
• Microsoft PowerShell analysis (November 2016)
• Microsoft Bot Builder SDK analysis (October 2016)
• Microsoft WPF Samples analysis (June 2016)
• Casablanca analysis (March 2013), second analysis (June 2016)
• Xamarin.Forms analysis (May 2016)
• Microsoft Cognitive Toolkit (CNTK) analysis (February 2016)
• ChakraCore analysis (January 2016)
• Microsoft Code Contracts analysis (December 2015)
• .NET Core Common Language Runtime (CoreCLR) analysis (March 2015)
• Microsoft Word 1.1a analysis (April 2014)
• Windows 8 Driver Samples analysis (April 2013)

Web Browsers

• Chromium analysis (May 2011), second analysis (October 2011), third analysis (August 2013), fourth analysis (December 2013), fifth analysis (October 2016), sixth analysis: introduction, part 1, part 2, part 3, part 4, part 5, part 6, part 7 (January 2018), seventh analysis (December 2021)
• Firefox analysis (December 2011), second analysis (June 2014)

GameDev

• GZDoom analysis (December 2023)
• San Andreas Unity analysis (November 2023)
• SDL analysis (November 2023)
• Quake World analysis (September 2023)
• VCMI analysis (July 2023)
• Space Station 14 analysis (June 2023)
• Thrive analysis (June 2023)
• Captain Blood analysis (February 2023)
• Stride analysis (September 2022)
• Overgrowth analysis (June 2022)
• GPCS4 analysis (June 2022)
• Unity analysis (April 2018), second analysis (April 2022)
• Barotrauma analysis (March 2022), second analysis (June 2023)
• Ogre3D analysis (March 2022)
• MonoGame analysis (February 2022)
• Carla analysis (November 2021)
• DuckStation analysis (November 2021)
• RPCS3 analysis (November 2021)
• TheXTech analysis (November 2021)
• Nintendo Switch analysis (June 2021), second analysis (July 2023)
• Storm Engine analysis (June 2021)
• Free Heroes of Might and Magic II analysis (February 2021)
• Amnesia: The Dark Descent analysis (October 2020)
• XMage analysis (August 2020)
• OpenRA analysis (July 2020)
• Minetest analysis (July 2020)
• OpenRCT2 analysis (July 2020)
• Command & Conquer analysis: part 1, part2 (July 2020)
• Newton Dynamics analysis (June 2014), second analysis (April 2020)
• RunUO analysis (February 2020)
• VVVVVV analysis (January 2020)
• osu! analysis (January 2020)
• Doom 1 analysis (August 2019)
• PPSSPP analysis (August 2019)
• Yuzu analysis (August 2019)
• Bullet Physics SDK analysis (July 2019)
• EAStdC analysis (July 2019)
• Cataclysm: Dark Days Ahead analysis (April 2019)
• Godot Engine analysis (April 2015), second analysis (November 2018)
• 0 A.D. analysis (August 2018)
• Vangers: One for the Road analysis (July 2018)
• System Shock analysis (July 2018)
• Amazon Lumberyard analysis (July 2018)
• Unreal Engine 4 analysis (April 2014), second analysis (June 2015), third analysis (June 2017)
• CryEngine V analysis (August 2016), second analysis (April 2017)
• CMaNGOS analysis (February 2017)
• Unity3D's Components analysis (August 2016)
• X-Ray Engine analysis (June 2016)
• Serious Engine analysis (March 2016)
• Xenko analysis (March 2016)
• Space Engineers analysis (February 2016)
• Spring RTS analysis (December 2014)
• Cocos2d-x analysis (August 2014)
• OpenMW analysis (May 2014)
• CryEngine 3 SDK analysis (March 2014)
• Source SDK analysis (January 2014)
• Multi Theft Auto analysis (August 2013)
• TrinityCore analysis (February 2012)
• Quake III Arena GPL analysis (February 2012)
• Doom 3 analysis (November 2011)

Compilers

• GCC 13 analysis (September 2023)
• PeachPie analysis (August 2021)
• LLVM (Clang) analysis (August 2011), second analysis (August 2012), third analysis (October 2016), fourth analysis (April 2019), fifth analysis (October 2020), sixth analysis (October 2021), seventh analysis (October 2022)
• GCC analysis (August 2016), second analysis (April 2020)
• Huawei Ark Compiler analysis (December 2019)
• Mono analysis (September 2016)

Programming languages

• PascalABC.NET analysis (March 2017), second analysis (January 2022)
• Perl 5 analysis (October 2018)
• Scilab analysis (March 2014), second analysis (June 2017)
• CPython & Ruby analysis (July 2016)
• PHP analysis (September 2014), second analysis (April 2016)
• IronPython/IronRuby analysis (January 2016)
• GNU Octave analysis (August 2015)

Development

• Qt Creator analysis (February 2024)
• IntelliJ IDEA analysis (December 2023)
• CodeLite analysis (August 2023)
• MassTransit analysis (August 2023)
• Rhino analysis (September 2022)
• AvalonStudio IDE analysis (July 2022)
• ILSpy analysis (February 2021)
• CMake analysis (August 2019)
• CruiseControl.NET analysis (May 2017)
• Valgrind analysis (May 2017)
• SharpDevelop analysis (November 2015), second analysis (January 2017)
• CodeLite analysis (October 2016)
• GitExtensions analysis (October 2016)
• GDB analysis (September 2016)
• FlashDevelop analysis (July 2016)
• OpenJDK analysis (June 2016)
• Dolphin Smalltalk 7 analysis (January 2016)
• MonoDevelop analysis (December 2015)
• Doxygen analysis (August 2015)
• TortoiseGit analysis (May 2014)
• TortoiseSVN analysis (December 2010), second analysis (June 2013)

Libraries

• MudBlazor analysis (February 2023)
• Discord.NET analysis (July 2022)
• Orleans analysis (July 2022)
• Eto.Forms analysis (March 2022)
• Blend2D analysis (December 2021)
• Protocol Buffers analysis (November 2021)
• GTK 4 analysis (February 2021)
• Qt analysis (July 2011), second analysis (April 2014), third analysis (October 2018), fourth analysis (February 2021)
• GTK+ analysis (March 2016), second analysis (February 2021)
• ELKI analysis (January 2021)
• Espressif IoT Development Framework analysis (January 2021)
• Apache Flink analysis (December 2020)
• Bouncy Castle analysis (November 2020)
• Awesome Hpp analysis (October 2020)
• PMDK analysis (August 2020)
• ABBYY NeoML analysis (July 2020)
• Ghidra Framework analysis (June 2020)
• TensorFlow.NET analysis (April 2020)
• Avalonia UI (December 2019)
• Huawei Cloud SDK analysis (November 2019)
• OpenCvSharp analysis (October 2019)
• Telerik UI for UWP analysis (October 2019)
• CUBA Platform analysis (April 2019)
• AWS SDK for .NET analysis (January 2019), second analysis (July 2023)
• EFL Core Libraries analysis (July 2017)
• TensorFlow analysis (April 2017)
• ADO.NET Entity Framework analysis (March 2017)
• NUnit Framework analysis (August 2016)
• Nana C++ Library analysis (July 2016)
• Accord.Net analysis (July 2016)
• Lucene.Net analysis (March 2016)
• Amazon Web Services SDK analysis (March 2016)
• WPF examples by the Infragistics Company analysis (February 2016)
• Sony C#/.NET Components analysis (January 2016)
• MatrixSSL analysis (February 2015)
• NSS analysis (October 2014)
• OpenSSL analysis (December 2012), second analysis (April 2014)
• glibc analysis (February 2014)
• LibRaw analysis (February 2014)
• Boost analysis (August 2013)
• This one is not open-source, but still useful to everyone. C++Builder header files analysis (May 2013)
• OpenCV analysis (March 2013)
• Intel IPP Samples analysis (January 2011), second analysis (October 2011), third analysis (April 2012)
• Intel Energy Analysiser SDK analysis (July 2011)

Graphics

• OpenToonz analysis (April 2016), second analysis (March 2020)
• LibrePCB analysis (December 2018)
• Krita analysis (April 2018)
• Disney Software analysis (November 2016)
• Inkscape analysis (August 2016)
• Blender analysis (April 2012), second analysis (July 2016)
• Appleseed analysis (September 2015)
• FreeCAD analysis (April 2015)
• Powder Toy analysis (December 2014)
• GIMP analysis (August 2014)
• VirtualDub analysis (October 2013)

Music Software

• MuseScore analysis (September 2017), second analysis (March 2021)
• Steinberg SDKs analysis (November 2017)
• Ardour analysis (November 2017)
• Rosegarden analysis (October 2017)
• Audacity analysis (October 2017)

Messengers

• ICQ analysis (October 2016)
• Miranda IM analysis (March 2011), second analysis (May 2016)
• Telegram analysis (September 2015)
• Miranda NG analysis: part 1 (November 2014), part 2 (November 2014)
• qutIM analysis (November 2010)

Other projects

• NGB analysis (December 2023)
• YTSaurus analysis (October 2023)
• BTCPay Server analysis (May 2023)
• Bitwarden analysis (May 2022)
• Umbraco analysis (November 2015), second analysis (December 2016), third analysis (December 2021)
• LINQ to DB analysis (November 2021)
• CMS DotNetNuke analysis (November 2021)
• BitTorrent analysis (July 2021)
• Snort analysis (March 2021)
• STP analysis (March 2021)
• COVID-19 CovidSim Model analysis (February 2021)
• ONLYOFFICE Community Server analysis (December 2020)
• QuantConnect Lean analysis (December 2020)
• DeepSpeech analysis (October 2020)
• WildFly analysis (October 2020)
• QEMU analysis (September 2020)
• RavenDB analysis (June 2020), second analysis (May 2023)
• Nethermind analysis (May 2020)
• Chocolatey analysis (February 2020)
• Emby Server analysis (January 2020)
• Apache Hadoop analysis (December 2019)
• ROOT analysis (October 2019)
• Orchard CMS analysis (November 2016), second analysis (October 2019), third analysis (August 2022)
• Telegram Open Network analysis (October 2019)
• Celestia analysis (October 2019)
• Mozilla Thunderbird analysis (September 2015), second analysis (September 2019)
• Apache Dubbo analysis (August 2019)
• Apache Hive analysis (August 2019)
• LXC analysis (June 2019)
• Wireshark analysis (June 2015), second analysis (April 2019)
• Elasticsearch analysis (March 2019)
• SpeedCrunch analysis (March 2019)
• FreeRDP analysis (March 2019)
• Qalculate! analysis (March 2019)
• FastReport analysis (November 2018)
• NCBI Genome Workbench analysis (November 2018)
• LibreOffice analysis (March 2015), second analysis (October 2018)
• Subtitle Edit analysis (Match 2018)
• ClickHouse analysis (September 2017)
• Notepad++ analysis (November 2010), second analysis (February 2012), third analysis (June 2017)
• MediaPortal analysis (March 2017)
• Far Manager for Linux analysis (February 2017)
• Grub analysis (September 2016)
• Apache HTTP Server analysis (July 2011), second analysis (September 2016)
• ReOpenLDAP analysis (August 2016)
• NASA World Wind analysis (C#) (August 2016)
• Geant4 analysis (November 2013), second analysis (July 2016)
• 7-Zip analysis (June 2016)
• Firebird analysis (February 2014), second analysis (May 2016)
• Samba analysis (April 2016)
• PVS-Studio Plugin analysis (March 2016)
• Oracle VM VirtualBox analysis: part 1, part 2 (September 2014), second analysis (March 2016)
• Wine analysis (August 2014), second analysis (October 2015)
• FreeSWITCH analysis (October 2015)
• Intel Galileo UEFI analysis (May 2015)
• Vim analysis (March 2015)
• KDE analysis (September 2014)
• Oracle VM VirtualBox analysis: part 1, part 2 (September 2014)
• Asterisk analysis (August 2014)
• Bitcoin analysis (July 2014)
• Tesseract analysis (May 2014)
• WinSCP analysis (April 2014)
• μManager analysis (March 2014)
• PostgreSQL analysis (December 2013)
• OpenMS analysis (September 2013)
• Trans-Proteomic Pipeline analysis (August 2012), second analysis (September 2013)
• NetXMS analysis (May 2013)
• Tor analysis (November 2012)
• MAME analysis (July 2012)
• WinMerge analysis (October 2010), second analysis (March 2012)
• Dolphin-emu analysis (February 2012)
• Ultimate Toolbox analysis (December 2010)
• Fennec Media Project analysis (November 2010)