A little while back, we were talking about utilizing compiler warnings as first step to make our C code less error-prone and increase its general stability and quality. We know now that the C compiler ...

One of the best ways to protect your software project from avoidable bugs is the use of Java static code analysis tools. These tools can help identify and fix problematic code before it reaches ...

being a user of PCLINT for some years now (private and professional), I was thinking whether some static analysis tool could help our company to spot issues like 32 vs. 64bit discrepancies and - more ...

Static source code analysis tools have evolved from simple syntax checkers to powerful tools for identifying flaws in the complex interactions of large code bases. Until recently, however, they were ...

CodeSonar source-code analysis tool version 3.4 includes support for enforcing the power of 10: rules for developing safety-critical code. The static-analysis tool performs a whole-program ...

The high cost of finding and patching application flaws is well known. Wouldn’t it be cheaper to write secure code in the first place? One of the fastest growing areas in the software security ...

How exhaustive static analysis overcomes the limitations of traditional tests and static-analysis tools. How exhaustive static analysis identifies a buffer overflow by using code samples. How hardware ...