Static Analysis Tools

• AdaTEST 95
• Cantata++
• eValid
• Logiscope
• McCabe IQ
• TestWorks/Advisor

Kind of Tool

C "readability" analyser (freeware)

Organization

Joerg Lawrenz
Universitaet Karlsruhe
http://www.chris-lott.org/resources/cmetrics/

Software Description

'ccount' is a set of simple tools for the analysis of the syntactic readability of C source programs. The attributes computed by the ccount tools are things such as:

• length of modules/functions/blocks/ifs/whiles/switches,
• number of control structures
• number of operators in expressions,
• nesting depth of blocks etc.

Platforms

Most Unix

Return to Listings

Kind of Tool

Fortran coding checker & structure analyser (freeware)

Organization

J.J.Bunn, H. Grote
CERN
CH-1211 GENEVA 23
SWITZERLAND
E-mail:
http://netlib2.cs.utk.edu/floppy/

Platforms

Most Unix (requires lex)

Return to Listings

Kind of Tool

Fortran program static analyser (freeware)

Organization

Robert Moniot
Fordham University
New York, NY 10023 USA
Phone: (212) 636-6311
E-mail:
Web URL: http://www.dsm.fordham.edu/~ftnchek

Software Description

Lint-like program for fortran. Checks function/subroutine calls against the definitions for mismatches in the argument lists, unused, undeclared or uninitialised variables and other common types of error. Can also generate a call graph and warn about use of extensions to the fortran 77 standard or use of potentially non-portable constructs (eg equivalencing variable of different types).

Platforms

Fortran, most UNIX, VMS, MS-DOS, Mac/MPW. C compiler required to build from source.

Entry updated April 28, 1998.
Return to Listings

Kind of Tool

Software measurement tool

Organization

SET Laboratories, Inc.
http://www.molalla.net/~setlabs

Platforms

MS-DOS, UNIX, VMS

Return to Listings

Kind of Tool

Static Analysis Tool

Organization

ParaSoft Corporation
http://www.parasoft.com/

Software Description

CodeWizard is a unique coding standards enforcement tool that uses patented Source Code Analysis technology (patent #5,860,011) to help developers prevent errors and standardize C++ code automatically. CodeWizard spontaneously enforces C++ coding standards, saving hours of labor-intensive analysis.

CodeWizard Features:

• Enforces over 70 coding standards automatically.
• Pinpoints exact location of programming and design violations.
• Provides a full, detailed explanation for each error found.
• Allows you to edit code directly inside CodeWizard.
• Allows customization of existing coding standards and writing of new coding standards to suit each project or development team.
• Allows flexible suppressions to enforce only the coding standards that are relevant to the current project.

CodeWizard Benefits:

• Reduces bugs by 25%
• Streamlines development process for quicker time to market
• Reduces development and support costs
• Helps improve overall design of code
• Reduces time spent on maintenance, porting, and extension
• Accelerates learning curve for C++

Platforms

Windows NT/95/98/2000, Linux, DEC Alpha, IBM RS/6000 (AIX 4.x), HP (HP-UX 10 & 11), SGI (IRIX 6.x), Solaris

Entry added April 14, 2000.
Return to Listings

Kind of Tool

Automatic Static Analysis & Unit Testing for Java

Organization

ParaSoft Corporation
http://www.parasoft.com/

Software Description

Jtest is an automatic static analysis and unit testing tool for Java development. With the click of a button, Jtest automatically enforces over 300 industry-respected coding standards, allowing organizations to prevent the most common and damaging errors. Jtest reduces time spent chasing and fixing bugs by automatically generating unit test cases that test code construction and functionality, and performs regression testing to ensure that no new errors have been introduced into code.

Platforms

Windows NT/2000/XP, Linux, and Solaris

Entry updated May 28, 2003.
Return to Listings

Kind of Tool

Static Analysis and Code Coverage

Organization

Plum Hall, Inc.
http://www.plumhall.com/

Software Description

For testing C and C++ code, two major components:

Guidelines Checker

Checks source against Plum Hall Programming Guidelines. Terse report highlights fault-prone programming practice for early correction.

CTest++

Incremental and cumulative code coverage, including correlation of test cases to chunks of code tested. Helps give insight into which code test cases exercise, eliminating unnecessary redundant tests, and speeding development of new tests.

Plum Hall SQS incorporates a parser, not just a lexical analyzer. Flexibly supports test harnesses, whether embedded code, standalone code, manual, or the easy GUI scripting provided, using A-Language.

Platforms

WIN32, (UNIX planned)

Return to Listings

Kind of Tool

Static Analysis and Code Coverage tool suite

Organization

LDRA
http://www.ldra.com/testbed.asp

Software Description

LDRA Testbed is a unique quality control tool that provides powerful source code analysis and testing facilities for the validation and verification of software applications. The tool is available for static analysis only, as well as being a fully integrated tool suite for static analysis and code coverage.

Static Analysis analyses the code and provides an understanding of the code structure. The analysis capabilities include programming standards verification, structured programming verification, complexity metric production, full variable cross reference, unreachable code reporting, static data flow analysis, code reformatting, information flow analysis, loop analysis, analysis of recursive procedures and procedure interface analysis. Dynamic Analysis analyses the code and provides an understanding of the code structure and measures code coverage of statements, branches, test paths (lcsaj coverage), sub conditions, & procedure calls. Several coverage levels are available including MC/DC level A of the DO-178B standard.

The tool suite is available for C, C++, Ada83, Ada95 & Assemblers (Intel, Freescale and Texas Instruments).

Platforms

Windows 9x/NT/2000/XP, Unix (Sun Solaris & HP-UX), Linux (Red Hat/Fedora, SUSE, Debian, Thalix) and HP OpenVMS (Alpha & IA-64 Itanium)

Entry updated May 17, 2007.
Return to Listings

CMT++

Kind of Tool

Static analysis tool for C and C++ code

Organization

Testwell Oy
http://www.testwell.fi/cmtdesc.html

Software Description

CMT++ (Complexity Measures Tool for C/C++) calculates the basic McCabe, Halstead and lines-of-code metrics for C and C++ code. Clear and compact report. Configurable alarm limits. Can measure non-preprocessed source code. Can produce Excel data file for customer specific analysis or for producing graphical representations. Processes 1000s of lines of code in a second and can manage huge code volumes. Does not require a C/C++ compiler, but if Visual C++ is available, CMT++ can be used via its GUI.

Platforms

Windows 2000/NT/9x, HPUX, Solaris, Linux.

Entry updated April 23, 2001.
Return to Listings

Kind of Tool

Supports the evaluation of the legacy systems through metrics and quality checks.

Organization

SES Software-Engineering Service GmbH
http://www.soring.hu/

Software Description

SofAudit is a tool for the static analysis of Assembler, COBOL, PL/I and NATURAL programs as well as for IMS, CODASYL, ADABAS and SQL databases. Besides checking the source against predefined rules, it also measures the size, complexity and quality of the programs and data bases. It produces a metric report and a deficiency report.

Platforms

PC Windows (Windows 3.11, Windows95 and Windows/NT)

Entry added April 28, 1998.
Return to Listings

Kind of Tool

Metric Analysis Tool

Organization

Software Research, Inc.
http://www.soft.com/TestWorks/

Software Description

METRIC is the software metrics system for the fully integrated TestWorks/Advisor suite of static source code analyzers and measurement tools. METRIC works as a stand-alone product or as part of the TestWorks/Advisor tool suite to quantitatively determine source code quality. After processing a source code file, METRIC automatically computes various software measurements. These metrics include the Halstead Software Science metrics, which measure data complexity in routines; the Cyclomatic Complexity metrics, which measure logic complexity in routines; and size metrics, such as number of lines, comments and executable statements.

Platforms

SPARC SunOS 4.1.3; SPARC Solaris 2.3, 2.4, 2.5, 2.5.1, 2.6; x86 Solaris 2.4, 2.5; RS-6000/AIX 3.2.5, 4.1.2, 4.2; HP-9000/7xx HP-UX 9.05, 10.10; HP-9000/8xx HP-UX 9.04, 10.01, 10.10; x86 SCO/ODT 2.0, 5.0(3.0); SGI Irix 5.3, 6.2; DEC-Alpha OSF1 3.2, 4.0; NCR 3000; SCO/UnixWare 2.1.1; DOS.

Entry updated October 23, 2003.
Return to Listings

Kind of Tool

Static Analysis Tool

Organization

Software Research, Inc.
http://www.soft.com/TestWorks/

Software Description

STATIC is the static analyzer system for the fully integrated TestWorks/Advisor suite of static source code analyzers and measurement tools. Working as a stand-alone product or as part of the tool suite, STATIC provides more comprehensive syntax and semantic analysis for C programs than most compilers, including locating non-portable constructs and dead code. STATIC also searches the entire program for inconsistencies across the modules that comprise an application. This feature is especially important when analyzing code in multi-programmer projects. STATIC processes a code file or multiple files and generates a report covering more than 300 possible syntactical, warning and informational messages.

Platforms

SPARC SunOS 4.1.3; SPARC Solaris 2.3, 2.4, 2.5, 2.5.1, 2.6; x86 Solaris 2.4, 2.5; RS-6000/AIX 3.2.5, 4.1.2, 4.2; HP-9000/7xx HP-UX 9.05, 10.10; HP-9000/8xx HP-UX 9.04, 10.01, 10.10; x86 SCO/ODT 2.0, 5.0(3.0); SGI Irix 5.3, 6.2; DEC-Alpha OSF1 3.2, 4.0; NCR 3000; SCO/UnixWare 2.1.1; DOS.

Entry updated October 23, 2003.
Return to Listings

Kind of Tool

Deep Flow Static Analysis Tool

Organization

Programming Research Ltd.
http://www.programmingresearch.com/

Software Description

The focus is on automated enforcement of Coding Standards as an integrated step in the software development process for C, C++, Java and Fortran. The enforcement of coding standards is a key step for CMM Level 3 attainment. The tools also generate code metrics (e.g. Cyclomatic Complexity, Estimated Path Count, etc.) which can be used for CMM Level 4 process measurements, and form a basis for optimization in Level 5. The tools detect stylistic issues, dataflow problems, ISO C/C++ conformance, platform and compiler portability issues, metric threshold violations and enforce best practice issues in language implementation. In addition, the tools can be integrated into Visual Developer Studio (Microsoft), Eclipse (Open Source, IBM) and Tornado (Windriver). They also produce a range of interactive source comprehension views such as call trees and control flow diagrams.

Platforms

Win32, Solaris, HP, Linux.

Entry updated January 8, 2003.
Return to Listings

Kind of Tool

Deep Flow Static Analysis Tool

Organization

Programming Research Ltd.
http://www.programmingresearch.com/

Software Description

The focus is on automated enforcement of Coding Standards as an integrated step in the software development process for C, C++, Java and Fortran. The enforcement of coding standards is a key step for CMM Level 3 attainment. The tools also generate code metrics (e.g. Cyclomatic Complexity, Estimated Path Count, etc.) which can be used for CMM Level 4 process measurements, and form a basis for optimization in Level 5. The tools detect stylistic issues, dataflow problems, ISO C/C++ conformance, platform and compiler portability issues, metric threshold violations and enforce best practice issues in language implementation. In addition, the tools are available integrated with other IDE's such as Visual Developer Studio (Microsoft), Eclipse (Open Source, IBM) and Tornado (Windriver). They also produce a range of interactive source comprehension views such as call trees and control flow diagrams.

Platforms

Win32, Solaris, HP, Linux.

Entry updated January 8, 2003.
Return to Listings

Kind of Tool

Deep Flow Static Analysis Tool

Organization

Programming Research Ltd.
http://www.programmingresearch.com/

Software Description

The focus is on automated enforcement of Coding Standards as an integrated step in the software development process for C, C++, Java and Fortran. The enforcement of coding standards is a key step for CMM Level 3 attainment. The tools also generate code metrics (e.g. Cyclomatic Complexity, Estimated Path Count, etc.) which can be used for CMM Level 4 process measurements, and form a basis for optimization in Level 5. The tools detect stylistic issues, dataflow problems, ISO C/C++ conformance, platform and compiler portability issues, metric threshold violations and enforce best practice issues in language implementation. In addition, the tools are available integrated with other IDE's such as Visual Developer Studio (Microsoft), Eclipse (Open Source, IBM) and Tornado (Windriver). They also produce a range of interactive source comprehension views such as call trees and control flow diagrams.

Platforms

Win32, Solaris, HP, Linux.

Entry updated January 8, 2003.
Return to Listings

Kind of Tool

"C" Pre-compile Analysis Tool

Organization

Cleanscape Software International
http://www.cleanscape.net/stdprod/lplus/index.html

Software Description

A stand-alone source code analyzer that expedites software development by simplifying the debugging and maintenance of "C" programs. lint-Plus detects problems compilers cannot catch, such as "C" global-variable inconsistencies, as well as analyzes source files both individually and as a group.

Platforms

Linux(Alpha, Intel), Unix (Sun, Solaris, HP, IBM, , SGI, Compaq/Digital, Tru64), VMS (VAX, Alpha)

Entry added July 28, 2000
Return to Listings

Kind of Tool

Source code analyzer for Visual Basic

Organization

Aivosto Oy
http://www.aivosto.com/vb.html

Software Description

Project Analyzer runs an automated quality check on VB code. It calculates metrics and reports problems related to optimization, coding style and program functionality.

Platforms

Windows 95/98/NT/2000

Entry added October 6, 2000.
Return to Listings

Kind of Tool

COBOL analyzer

Organization

Balthazar Ltd.
URL: http://www.balthazar.hu/

Software Description

ClearMaker is an analyser for COBOL programs that executes an outstandingly thorough analysis in a relatively short time. ClearMaker's analysis is based on a deep examination of impacts, called ripple effect analysis or slicing. ClearMaker, in addition, goes even further than "traditional" slicing. The main novelty is that the analyser is able to determine the impact of program modifications as well. This simplifies regression testing significantly.

ClearMaker, beside single programs, is able to test whole systems of programs. Our new technique makes the analysis of systems made up of even over one million lines possible. Not only does it provide the influences concerning starting statements, but it also shows why and how a selected statement affects a certain statement. Traditional analyzer's features such as displaying call graph, control flow graph and cross-reference are also included into ClearMaker.

Platforms

Windows 95, 98, NT, 2000

Entry added December 19, 2000
Return to Listings

Kind of Tool

Static Analysis

Organization

Gimpel Software
http://www.gimpel.com/

Entry added March 15, 2001.
Return to Listings

Kind of Tool

Static Analysis

Organization

Oakwood Computing Associates Ltd.
http://www.oakcomp.co.uk/SCT.html

Entry added March 15, 2001.
Return to Listings

Kind of Tool

Metric Analyzer for Java and C/C++

Organization

Power Software
http://www.powersoftware.com/

Software Description

Krakatau gives metric information on source code at the click of a button.

As well as a comprehensive (over 70 metrics) the user interface gives several graphical methods of sorting and viewing the metric results. This gives quick access to sections of your code with high values for given metrics.

The Project Manager version of the tool can compare versions of your projects and quickly highlight where your code has been changing.

Platforms

Windows NT/2000, Solaris

Entry added May 24, 2001.
Return to Listings

Kind of Tool

A tool for troubleshooting system errors related to loading and executing modules. (freeware)

Organization

Steve P. Miller
E-mail:
http://www.dependencywalker.com/

Software Description

Dependency Walker is a free utility that scans any 32-bit or 64-bit Windows module (exe, dll, ocx, sys, etc.) and builds a hierarchical tree diagram of all dependent modules. For each module found, it lists all the functions that are exported by that module, and which of those functions are actually being called by other modules. Another view displays the minimum set of required files, along with detailed information about each file including a full path to the file, base address, version numbers, machine type, debug information, and more.

Dependency Walker is also very useful for troubleshooting system errors related to loading and executing modules. Dependency Walker detects many common application problems such as missing modules, invalid modules, import/export mismatches, circular dependency errors, mismatched machine types of modules, and module initialization failures.

Platforms

Windows 95, 98, Me, NT 3.51, NT 4.0, and Windows 2000.

Entry added June 18, 2001.
Return to Listings

Kind of Tool

A software analysis tool that enforces coding conventions on Java source code.

Organization

Jens Gustavsson
http://www.jensgustavsson.se/CodeCompanion.html

Software Description

CodeCompanion checks Java source code against a set of carefully selected coding convention rules, and reports whether it complies to the rules or not.

Platforms

CodeCompanion is written entirely in Java, and is therefore available for all platforms with a Java 2 Virtual Machine.

Entry added September 5, 2001.
Return to Listings

Kind of Tool

Static Analysis Tools

Organization

GrammaTech, Inc.
http://www.grammatech.com/

Software Description

CodeSurfer�, an analysis and inspection tool that lets software developers and maintainers easily understand detailed dependence relations in source code. CodeSurfer provides access to a program's deep structure semantic properties and relationships discovered by global program analyses that conventional tools do not see.

Platforms

Windows, Solaris

Entry added November 18, 2001.
Return to Listings

Kind of Tool

Static Runtime Error Detection Tool

Organization

The MathWorks, Inc.
http://www.polyspace.com/

Software Description

PolySpace tools statically analyze the dynamics of software applications by relying solely on the source code. They provide a cost-effective way to identify run-time errors directly in the code as soon as it is available (at compilation time). No test cases, instrumentation or execution is required. In contrast to dynamic testing, PolySpace automatically and directly highlights causes of run-time errors in the source code. This dramatically accelerates the debugging effort. The net result is a drastic reduction in software development costs by dramatically reducing the time spent on testing and debugging.

PolySpace tools are available as a client-server solution. They can be used at different stages of the software development - during validation on single files, during unit tests, at integration or at verification time. They can also be used on legacy code that needs to be reviewed, or by OEMs during acceptance tests.

Polyspace also offers a coding rule checker based on MISRA-C:2004 as a standard option of its runtime error detection tools.

PolySpace tools are available for C, C++ and Ada.

Platforms

Linux, Windows, Solaris

Entry updated November 17, 2005.
Return to Listings

Kind of Tool

Web Site Test Tools (freeware)

Organization

HiSoftware, Inc.
http://www.hisoftware.com/msacc/

Software Description

AccVerify SE for FrontPage provides verification and reports all errors/non-compliance with accessibility policy and standards for Web sites under the W3C Guidelines and Section 508. In addition, the software provides a complete checklist for standards that must be manually verified to take you 100% of the way to an accessible Web site. This product is available at no cost to all users of Microsoft FrontPage.

• Full Verification for W3C Priority One Accessibility Checks
• Filter to verify the 508 Standard only from US Government Guidelines
• 100% configuration of reports
• Reports are presented through a graphical interface Detailed and Checklist Reports provided Reports can be saved, e-mailed, printed and displayed in either text or HTML
• Help with Checklists and support for compliance techniques
• Includes full Accessibility Remediation guide with examples for correcting accessibility errors
• Works directly from FrontPage, including the new 2002 version

Other tools also available.

Platforms Works on Windows based PCs. Requires Microsoft FrontPage 2002, 2000 or 98.

Entry added January 31, 2002.
Return to Listings

Kind of Tool

Global data flow analyser

Organization

Tata Consultancy Services
http://www.tcs.com/

Software Description

A good software development process requires programs to be written to well-defined programming standards. The task of ensuring that programs follow coding standards is not easy or effective to perform manually. ASSENT is a global data flow static analysis tool that automatically ensures conformance of C/C++ and Java code to good programming practices and detects defects that can cause the program to crash.

Platforms

WIN 2000/NT/98/95, Solaris, AIX, Linux, MAC OS X

Entry updated April 3, 2002.
Return to Listings

Kind of Tool

Automates code reviews

Organization

Superior Software for Windows Pty Ltd
http://www.ssw.com.au/

Software Description

As a project or company grows, managing code standards throughout your team becomes virtually impossible. But consistent code is crucial to future development and maintenance. Built in C#, SSW Code Auditor lets you take control of your code and automatically review your web apps and projects - giving you more opportunity to spend time where it really matters.

Here at SSW, we face the problem of maintaining our standards across nearly five thousand web pages, over twenty active projects in both Visual Basic (6 and .NET) and C-Sharp. There comes a point where a tool to check (or audit) our work would need was needed, this tool is SSW Code Auditor.

Platforms

System requires a .NET framework. Windows 98, ME, NT 4.0, 2000 or XP

Entry updated September 5, 2002.
Return to Listings

sclc

Kind of Tool

Source-code line counter (freeware)

Organization

Brad Appleton
E-mail:
http://www.bradapp.net/clearperl/sclc-cdiff.html

Software Description

Sclc will count the number of total lines, blank-lines, comments, non-comment source lines (NCSL), and assembly equivalent source lines (AESL) in the given input files. Sclc is integrated with cdiff, which performs a ClearCase cleardiff which includes lines of surrounding context, and is included in the package with sclc.

Supports these languages: Ada, Assembly, Awk, C, C++, Eiffel, Java, Lisp, Pascal, Perl, Tcl, shell, make.

Distributed under the Perl license (Artistic or GNU GPL).

Platforms

Most platforms that support Perl.

Entry updated May 2, 2003.
Return to Listings

Kind of Tool

QA J is a software productivity management and quality analysis solution for Java� applications. It ensures that both the individual and the business have a comprehensive view of the enterprise's code quality.

Organization

Programming Research Ltd.
http://www.programmingresearch.com/

Software Description

QA J is a software productivity management and quality analysis solution for Java(TM) technology-based applications. It ensures that both the individual and the business have a comprehensive view of the enterprise's code quality.

Ultimately reduces the risk, cost and time-to-market, increasing the quality, productivity and profitability of the business.

QA J ensures that both development teams and management have access to valuable knowledge based on measurements taken throughout the software development lifecycle.

QA J includes static analysis checks and metrics that detect inconsistencies and errors in language implementation as well as source code issues involving standards compliance, programming practices and performance, thus enabling fast and efficient development of robust software.

Platforms

Entry updated January 1, 2003.
Return to Listings

QStudio for Java Pro

Kind of Tool

Java Quality Control and Assessment

Organization

QA Systems BV
http://www.qa-systems.com/

Software Description

QStudio� for Java "The Software Health Tool for Java" - is a breakthrough code quality assessment and quality control tool for Java development. The products integrate seamlessly with all major Java Development Environments (JBuilder, JDeveloper, Visual Age, NetBeans and Eclipse).

Platforms

QStudio� for Java Pro 1.8 is available for Windows (98/2000/NT/XP/ME), Linux (RedHat Linux 6.1 and higher, SuSE Linux 7.0 and higher) and Solaris (Solaris 6.1 and higher).

Entry updated February 7, 2003.
Return to Listings

Metrics Tools

Kind of Tool

Metrics tool for Java, VBScript

Organization

Semantic Designs, Inc.
http://www.semdesigns.com/Products/Metrics/index.html

Software Description

SD's Metrics tools collect standard metrics on source code, including SLOC, NCSLOC, Cyclomatic Complexity, Decision Density, and many summaries, including exact location of the "worst" structure according to each metric, in each subystem at all levels. Based on SD's generalized compiler technology; expect metrics for other langauges soon.

Platforms

Windows/NT/2K/XP.

Entry updated April 5, 2003.
Return to Listings

Malpas

Kind of Tool

MALPAS is an advanced software package for software analysis and verification

Organization

Atkins Limited
http://www.advantage-business.co.uk/products/article/0/44

Software Description

MALPAS gives project managers and software engineers a unique tool for the comprehensive analysis of complex software. Each of the five analysers in the MALPAS tool-set examines a different aspect of the software, revealing general problems (for example bad structure or inconsistent data usage) and pin-pointing specific errors such as incorrectly implemented algorithms or inconsistencies with the specification. Because MALPAS analyses source-code without actually executing it (a process called static analysis), the tool does not require expensive test-rigs and is capable of giving 100% path coverage. By revealing errors simply and quickly, MALPAS leads not only to more reliable software but to reduced development and maintenance costs.

We currently support the following languages: C, Ada, PL/M, ASM, PowerPC

Platforms

PC

Entry updated January 20, 2006.
Return to Listings

Kind of Tool

Java Static Analysis (freeware)

Organization

Tom Copeland
http://pmd.sf.net/

Software Description

PMD scans Java source code and looks for potential problems like:

• Empty try/catch/finally/switch blocks
• Unused local variables, parameters and private methods
• Empty if/while statements
• Overcomplicated expressions - unnecessary if statements, for loops that could be while loops
• Classes with high Cyclomatic Complexity measurements

Platforms

Written in Java, so cross-platform (Unix, Windows, etc)

Entry updated August 30, 2005.
Return to Listings

Kind of Tool

Static Analysis for C and C++

Organization

Coverity
http://www.coverity.com/

Software Description

Coverity, as ranked by IDC, is the top static analysis vendor worldwide today. Coverity Prevent statically finds 30 types of software defects and security vulnerabilities. The tool easily scales to millions of lines of code. Coverity Extend is an SDK that allows developers to write their own custom checks by instructing Coverity's Analysis Engine to find defects unique to any development organization. Using Coverity Extend, developers have written static checks for deadlocks, race conditions and exception handling.

Platforms

Linux, HPUX, FreeBSD, NetBSD, Solaris and Windows

Entry updated October 6, 2005.
Return to Listings

Kind of Tool

Fully Integrated Software Quality and Security Solution

Organization

Klocwork
http://www.klocwork.com/

Software Description

Klocwork seamlessly integrates into today's most popular development environments. Klocwork's patented static source code analysis technology extends Management Insight, Auditor Analysis, and Developer Assistance across the following critical development challenges.

• Defects - Automatically detect operationally affecting defects early in the process
• Security - Find security vulnerabilities in software and improve overall application security.
• Architecture - Understand large code bases and simplify their structure.
• Metrics - Measure and track key quality indicators throughout the release cycle.
• Customization - Use the product extensibility to customize the analysis to suit your organization's quality and security priorities.

Platforms

Windows XP, Linux, Solaris

Entry updated October 13, 2005.
Return to Listings

Kind of Tool

Automatic static, unit test, test coverage and dependencies analysis tool.

Organization

ALS
http://www.als-es.com/home.php?location=herramientas/entorno-desarrollo/jking

Software Description

jKing is a Java, Javascript and JSP code compliance and unit testing analysis tool for development teams building Java EE applications.

Features:

• Code Compliance (Java, Javascript and JSP).
• Unit testing.
• Test coverage.
• Dependencies analysis.

Platforms

Eclipse, JBuilder and WAS.

Entry updated October 26, 2006.
Return to Listings

Kind of Tool

Static analyzer for clean C++ code on 64-bit systems

Organization

OOO "Program Verification Systems"
http://www.viva64.com/

Software Description

Viva64 is the lint-like tool for searching of errors and possible problems in C++ code while porting the application to the 64-bit platform. Now when all the developers realize the need of releasing 64-bit versions of software, it is very necessary to make sure that the product being developed is of high quality. And while the 32-bit version of your application is tested thoroughly being ported to 64-bit platform it may cause unexpected problems.

Platforms

Windows

Entry updated January 25, 2007.
Return to Listings

Kind of Tool

C/C++ static analyzer

Organization

Vigilant Software, LLC.
http://www.vigilantsw.com/sentry

Software Description

Sentry is a powerful C/C++ static analyzer that finds critical software defects, such as memory access errors, resource leaks, and potential crashes, with a low false positive rate. Automatic integration with your build system makes set up trivial -- start finding bugs immediately.

Platforms

Windows, Linux

Entry updated December 22, 2009.
Return to Listings

Return to index