RSS
More Information
Relevant Reads
WHITEPAPER:The Customer Costs of Software Quality
This report quantifies the costs of low quality software for customers and uses benchmark data to illustrate the magnitude of these costs [...]
FACT SHEET:Klocwork Insight and Software Security
Achieving secure software with Klocwork Insight [...]
CASE STUDY:Motorola Case Study
In Motorola's continuous process improvement paradigm, the iDEN Mobile Devices software team implemented several process and tools in 2005 [...]
MISRA Coding Standards
Originally intended to provide guidance to facilitate safe and reliable coding practices for the automotive industry, the Motor Industry Software Reliability Association (MISRA) coding standards have been adopted by many other industries developing safety-critical embedded software including telecom, aerospace, defense, and medical. Klocwork provides built-in, automated detection and reporting for MISRA-C:2004 and MISRA-C++:2008.
Using Klocwork, MISRA coding standard violations can be reported automatically at the developer desktop, integration build, and through the Klocwork peer code review solution. Combined with Klocwork's leading defect detection capabilities, customers now have one tool that can be used to implement defect detection and coding standard enforcement.
Support for other coding standards
In addition to support for formal, published standards such as MISRA, Klocwork's analysis provides out-of-the-box support for general coding practices recommended by regulatory bodies, industry consortiums, and individual companies that are serious about software quality discipline. These various standards differ in some of their specifics but most recommend the following general guidelines, all of which are supported by Klocwork.
- Ban explicit language features that can hide coding errors
- Eliminate multiple declarations in functions, classes, data types, macros, variables, etc
- Only use pointer expressions after initialized
- Only include header files once
- Eliminate unused or unreachable code
- Place limits on the complexity of the software functions
Create your own coding standards
Customers can also leverage Klocwork's product extensibility for C, C++ and Java. This capability allows developers to easily extend Klocwork's extensive built-in library by adding their own checkers to meet their unique requirements.
The foundation for this capability is a high-level declarative language that allows developers to add their own checkers using one of two types of language frameworks:
- Abstract Syntax Tree (AST) checkers are used when the checker doesn't require runtime state to evaluate an error condition and can be found entirely within the source tree
- Data flow checkers require knowledge of the code's runtime state and complex data flow across function call boundaries in order to create effective analysis
Checker development for most custom checkers can be done right within the Klocwork Checker Studio, a graphical environment that allows developers to easily write new checkers that query their code's AST