Tools and Services: Static Analysis

All software systems are built to some degree using copy/paste/edit. This is efficient short term because it is code reuse. It is inefficient long term because it is reuse of assumptions (which break) and bugs, and failure to build clean abstractions of useful concepts and their implementation. CloneDR uses precise language parsers to locate duplicated code, in terms of language structures (statement sequences, declarations, methods, ...) including variants which have been edited. This enables management/removal of the clones.

Testwell CMT++ calculates the basic McCabe, Halstead, lines-of-code and maintainability Index metrics on C/C++. Configurable alarm limits. Very fast. Can manage huge code volumes. Can be used without included header files and a C/C++ compiler. Easy to read and compact textual and HTML reporting (hierarachical, color-coded, mapped to source files). Can produce Excel and XML data file for customer specific further processing and analysis.

Code Coverage is radically different from other software testing tools.

* Through an innovative strategy, runtime instrumentation gathers coverage information
* Dynamic Code Coverage measures all function in the process, not just a single module
* Measures 3rd party code
* Does not require any recompile, so is easiest to use

Dynamic Code Coverage re-invents the test coverage tool. Dynamic Code Coverage does not require any compile/link time instrumentation. Free Trial.

Automating complex analysis and modification tasks on software code requires compiler-accurate processing. DMS provides language-precise parsing for some 30 languages (including tough languages such as C++11, Java and C#), basic language analysis such as symbol tables and control/data flow analysis, pattern matching and transformation, and regeneration of code from transformed structures. Tool builders use the DMS as a foundation for building custom code processing tools; this can literally save years of elapsed development time.

Powered by a comprehensive static analysis engine, Klocwork Insight™ combines on-the-fly analysis, drag & drop build reporting and cross-project impact analysis to deliver serious productivity gains to the entire development process. Software teams around the world trust Klocwork Insight to help them develop the most secure and reliable code possible.

Offered as a downloadable Eclipse plug-in, Klocwork Solo® makes Klocwork’s award-winning static analysis technology available as a standalone tool for Java developers focused on mobile app development.

The McCabe IQ suite is made up of three multi-platform, multi-language software quality, testing, and security solutions. McCabe IQ Developers Edition uncovers and visualizes risk in the form of source code complexity and security vulnerability, providing a host of metrics. IQ Test Team Edition delivers the most stringent code coverage from LOC to Basis Path level. IQ Enterprise Edition provides all the functionality of the Developers and Test Team Editions, in addition to enterprise reporting and web-enabled test data collection.

Project Analyzer is a Visual Basic source code analyzer, optimizer, and documentor. Detect dead code and remove it. Diagram your systems. Surf your code as hypertext and graphical call trees. Document your work with a large selection of reports. Project Analyzer does an automatic code review to enforce configurable programming standards. It detects problems such as dead code and possible memory leaks. Supports VB 3-6, VBA and VB.NET.

Regular "diff" is line oriented; programmers think in terms of language structures. SmartDifferencer compares two source files using precise language parsers to determine code structure, and reports differences in terms of language structures (identifier, expression, statement, block, method) regardless of format layout. Changes are reported as plausible edits: copy, move, insert, delete, and rename-identifier-in-block. This reduces the amount of deltas compared to typical diff, and thus makes code reviews much easier.

Structure101 Build6 comprises a simple but powerful set of command line utilities, that integrates easily with almost any continuous integration environment, including off-the-shelf integration with Hudson/Jenkins, Maven and Sonar.