Walkthrough: Analyzing Managed Code for Code Defects

Visual Studio Team System

In this walkthrough, you analyze a managed project for code defects using the code analysis tool.

This walkthrough will step you through the process of using code analysis to analyze your .NET managed code assemblies for conformance with the Microsoft .NET Framework Design Guidelines.

In this walkthrough, you:

Analyze and correct code defect warnings.

Prerequisites

Visual Studio 2005 Team System.
A copy of the ManagedDemo Sample.

To analyze a managed project for code defects

In Visual Studio 2005, open the ManagedDemo solution.
Select the ManagedDemo project in Solution Explorer.
On the Project menu, click Properties.

The ManagedDemo properties page is displayed.
Click Code Analysis.
Select Enable Code Analysis (defines CODE_ANALYSIS constant).
On the File menu, click Save Selected Items, and then close the ManagedDemo properties pages.
On the Build menu, click Build ManagedDemo.

The ManagedDemo project build warnings are reported in the Error List and Output windows.

To correct code analysis rule violations

On the View menu, click Error List.

Depending on the developer profile you chose, you might need to point to Other Windows on the View menu, and then click Error List.
In Solution Explorer, click Show All Files.
Next, expand the Configuration node, and then open the AssemblyInfo.cs file.
Use the following table to correct warnings:

Warnings	To correct warning
Assemblies should declare minimum security: Microsoft.Usage: No valid permission requests were found for assembly 'ManagedDemo'. You should always specify the minimum security permissions using SecurityAction.RequestMinimum.	Add the code `using System.Security.Permissions;` to the `using` section of the AssemblyInfo.cs file. Next, add the code `[assembly:SecurityPermission(SecurityAction.RequestMinimum, UnmanagedCode=false)]` to the end of the AssemblyInfo.cs file.
Mark assemblies with CLSCompliant: Microsoft.Design: 'ManagedDemo' should be marked with the CLSCompliantAttribute, and its value should be true.	Add the code `using` `System;` to the AssemblyInfo.cs file. Next, add the code `[assembly: CLSCompliant(true)]` to the end of the AssemblyInfo.cs file. Rebuild the project.
Compiler Warning (level 1) CS3008.	Change the name of the field `_item` to `ItemCount`. Modify `public static int item { get { return _item; } }` to return `ItemCount`. Rebuild the project.
Mark ISerializable types with serializable: Microsoft.Usage: Add a [Serializable] attribute to type 'demo' as this type implements ISerializable.	Add the `[Serializable ()]` attribute to the class `demo`. Rebuild the project.
Implement standard exception constructors: Microsoft.Design: Add the following constructor to this class: public demo(String)	Add the constructor `public demo (String s) : base(s) { }` to the class `demo`.
Implement standard exception constructors: Microsoft.Design: Add the following constructor to this class: public demo(String, Exception)	Add the constructor `public demo (String s, Exception e) : base(s, e) { }` to the class `demo`.
Implement standard exception constructors: Microsoft.Design: Add the following constructor to this class: protected demo(SerializationInfo, StreamingContext)	Add the code `using System.Runtime.Serialization;` to the beginning of the Class1.cs file. Next, add the constructor `protected demo (SerializationInfo info, StreamingContext context) : base(info, context) { } to the class demo.` Rebuild the project.
Implement standard exception constructors: Microsoft.Design: Add the following constructor to this class: public demo()	Add the constructor `public demo () : base() { }` to the class `demo`. Rebuild the project.
Identifiers should have correct suffix: Microsoft.Naming: Rename 'testCode.demo' to end in 'Exception'.	Change the name of the class and its constructors to `DemoException`.
Identifiers should be cased correctly: Microsoft.Naming: Correct the casing of namespace name 'testCode'	Change the casing of the namespace `testCode` to `TestCode`.
Identifiers should be cased correctly: Microsoft.Naming: Correct the casing of member name 'item'.	Change the name of the member to `Item`.
Assemblies should have valid strong names: Sign 'ManagedDemo' with a strong name key.	On the Project menu, click ManagedDemo Properties. The project properties appear. Click Signing. Select the Sign the assembly check box. In the Choose a string name key file list, select <New…>. The Create Strong Name Key dialog box appears. In the Key file name, type TestKey. Enter a password and then click OK. On the File menu, click Save Selected Items, and then close the property pages. Rebuild the project.

Exclude Code Analysis Warnings

To exclude code defect warnings

Select the remaining warnings in the Error List, and then right-click and select Suppress Message(s).
Rebuild the project.

The project builds without any warnings or errors.