15. A computer-readable storage medium configured with data and with instructions that when executed by at least one processor causes the processor(s) to perform a method for globally analyzing correctness of a program source code with respect to SQL injection vulnerabilites, the method comprising the steps of: receiving a program source code which is written in a first programming language recognized by a code generation tool for code generation; locating modular annotation statements embedded in at least one-code-generative portion of the programming source code, the annotation statements written in a second programming language which is unrecognized by the first programming language's code generation tool, the second programming language including syntax for numeric operators, syntax for expressions which contain at least one numeric operator, syntax for logical operators, and syntax for expression which contain at least one logical operator; and producing injection vulnerability warning messages based on dataflow analysis of the modular annotation statements and the correctness of the program source code for SQL injection.
15. A computer-readable storage medium configured with data and with instructions that when executed by at least one processor causes the processor(s) to perform a method for globally analyzing correctness of a program source code with respect to SQL injection vulnerabilites, the method comprising the steps of: receiving a program source code which is written in a first programming language recognized by a code generation tool for code generation; locating modular annotation statements embedded in at least one-code-generative portion of the programming source code, the annotation statements written in a second programming language which is unrecognized by the first programming language's code generation tool, the second programming language including syntax for numeric operators, syntax for expressions which contain at least one numeric operator, syntax for logical operators, and syntax for expression which contain at least one logical operator; and producing injection vulnerability warning messages based on dataflow analysis of the modular annotation statements and the correctness of the program source code for SQL injection. 17. The configured storage medium of claim 15 , wherein the method locates an attach-COM-routine-validation statement within the program source code, and the method produces an injection vulnerability warning message at an entry point into a COM routine that is specified in the attach-COM-routine-validation statement.