Supriya Ghosh (Editor)

BoundsChecker

Updated on
Edit
Like
Comment
Share on FacebookTweet on TwitterShare on LinkedInShare on Reddit
Developer(s)
  
Micro Focus

Operating system
  
Windows

Website
  
[1]

Stable release
  
11.3 / July 2015

License
  
Proprietary software

Type
  
Profiler / Memory debugger

BoundsChecker is a memory checking and API call validation tool used for C++ software development with Microsoft Visual C++. It was created by Nu-Mega Technologies in the early 1990s. When Nu-Mega was purchased by Compuware in 1997, BoundsChecker became part of a larger tool suite, DevPartner Studio. Micro Focus purchased the product line from Compuware in 2009. Comparable tools include Purify, Insure++ and Valgrind.

Contents

BoundsChecker may be run in two distinct modes: ActiveCheck, which will work against any application as is, or FinalCheck, which makes use of instrumentation added to the application when it is built.

ActiveCheck performs a less intrusive analysis and monitors all calls by the application to the C Runtime Library, Windows API and calls to COM objects. By monitoring memory allocations and releases, it can detect memory leaks and overruns. Monitoring API and COM calls enables ActiveCheck to check parameters, returns and exceptions and report exceptions when they occur. Thread deadlocks can also be detected by monitoring of the synchronization objects and calls giving actual and potential deadlock detection.

FinalCheck requires an instrumented build and gives a much deeper but more intrusive analysis. It provides all of the detection features of ActiveCheck plus the ability to detect buffer overflows (read and write) and uninitialized memory accesses. It monitors every scope change, and tracks pointers referencing memory objects.

Leak Detection

  • Memory Tracking - Memory allocation and release is tracked over the life of the application, and an end-of-session report is generated showing which blocks of memory allocated by user code remain allocated at the time of a normal process termination. When compiler instrumentation is used, some memory leaks can be announced earlier, when the last pointer referring to an allocated block memory goes out of scope or gets overwritten by another value. Through the same mechanisms, attempts to use pointers to previously released memory are reported.
  • COM Object Tracking - COM object creation and destruction is tracked over the life of the application, and an end-of-session report is generated showing which objects remain active at the time of a normal process termination.
  • Resource Tracking - The creation and destruction of system object handles (like file handles, GDI handles and so on) is monitored, and an end-of-session report is generated showing which handles remain at the time of a normal process termination.

    • API Call Validation

    API calls are monitored, their input parameters verified before the function calls are actually performed, warning of possible problems. The API return codes are also monitored, and error codes are logged. Such validation is limited to such APIs as are known to BoundsChecker, currently several thousand in number. If Memory Tracking is enabled, API Call Validation can make use of the information gathered for more precise validation of memory pointers.

    Memory Overrun Detection

    When both memory tracking and API validation are enabled, it becomes possible to detect many kinds of array and buffer overrun conditions. Compiler instrumentation enhances this ability. This is the feature for which the product was originally named.

    API Call Logging

    API, COM method and .NET Interop function calls can be logged in detail, noting the call parameter values and the resulting return values. This feature is limited in value, as non-trivial applications often result in the session log quickly becoming too large.

    .NET Analysis

    A report can be generated analyzing .NET Interop, garbage collection and finalizer activity over the life of the process under test.

    Deadlock Analysis

    Certain kinds of deadly embraces and other such lockups can be detected.

    Compatibility

    The current version (11.3.0) of BoundsChecker supports 32-bit and 64-bit native applications on Windows XP through Windows 10. MS-DOS, 16-bit Windows and Windows 2000 applications are no longer supported. As part of DevPartner Studio, the product integrates with Visual Studio 2005 SP1, 2008 SP1, 2010 SP1, 2012 Update 4, 2013 Update 4 and 2015 Update 3.

    As of June 2016, the Deadlock Analysis feature is not yet supported in X64 applications.

    Criticisms

  • Licensing - Since the takeover by Micro Focus International, the suite has attracted criticism due to the increasingly awkward licensing mechanisms that need to be dealt with when installing and using it. For example, every single review on the online store site selling the product (apart from one submitted by one of its developers) describes the product as effectively unusable due to the way licensing is handled.
  • Speed - This is a relatively intrusive tool, and can slow the application under test anywhere from 50 to 300 times. The more of the features you use at a time, the slower it gets. This is particularly true when using compiler instrumentation.
  • Currency - Though the product works with many versions of Windows and of Microsoft Visual Studio, the API validation database has not been added to significantly since 2006. Newer APIs are generally not monitored.
  • Portability - Only Microsoft Windows and Microsoft Visual Studio are supported. There is no support for other operating systems nor compilers.
  • Noise - Many results are reported that, while valid, are not very useful. The most common of these kinds of things are API error returns. It is perfectly normal to have certain API calls fail. These kinds of results can be suppressed, however.

    • Version History

  • 11.3 - Jul 2015 - Support for Windows 10 and Visual Studio 2015.
  • 11.2 - Jan 2014 - Support for Windows 8.1, Windows 8.0 and Visual Studio 2013.
  • 11.1 - Apr 2013 - Chinese localization (excluding on-line help). Various bug fixes.
  • 11.0 - Sep 2012 - Full Visual Studio 2012 support, improved performance and accuracy.
  • 10.6 - Apr 2012 - New licensing model, product update checker, preliminary support for Visual Studio 2012, and system tray tool with activity monitor.
  • 10.5 - Feb 2011 - Supports X64 applications on Windows Vista X64 and later.
  • 10.0 - Apr 2010 - Supports Visual Studio 2010.
  • 9.1 - Oct 2009 - Supports Windows 7.
  • 9.0 - Sep 2008 - Supports Visual Studios 2005 & 2008.
  • 8.2 - May 2007 - Last version with full support for Visual Studio 6.0 and Visual Studio .NET 2003.
  • 6.0 - 1998 - First version after acquisition of NuMega by Compuware.
  • 5.0 - Mar 1997
  • 4.0 - 1996 - Introduced API Validation feature.
  • 2.0 for DOS - Mar 1991

    • References

    BoundsChecker Wikipedia
    (Text) CC BY-SA