I know of three vendors addressing this in the embedded space: Coverity, Klocwork, and Parasoft. One technique that all three of these vendors use is static path analysis. In response to my question ...

Static analysis works on source code and tries to identify errors based on what it can tell about the program. For example, it can highlight “dead code” that will never execute. And sometimes it can ...

Why you want to use MISRA C. What support IAR Embedded Workbench and C-STAT has for MISRA C. Issues related to static analysis. In addition, there’s the CERT C/C++ Secure Coding Standard published by ...

Static TypeScript is a subset of TypeScript that runs in a web browser and compiles to ARM Thumb machine code Microsoft is proposing a subset of TypeScript, the company’s popular typed superset of ...

Almost without exception, as soon as a new security vulnerability is reported, people ask us, “Could a static analysis tool have found that bug?” Yesterday was no different when Poodle was announced.