C/C++静态代码分析工具

链接：

• Astrée – finds all potential runtime errors by abstract interpretation, can prove the absence of runtime errors and can prove functional assertions; tailored towards safety-critical C code (e.g. avionics).
• BLAST – (Berkeley Lazy Abstraction Software verification Tool) – An open-source software model checker for C programs based on lazy abstraction.
• Cppcheck – Open-source tool that checks for several types of errors, including use of STL.
• cpplint – An open-source tool that checks for compliance with Google's style guide for C++ coding.
• Clang – An open-source compiler that includes a static analyzer.
• Coccinelle – An open-source source code pattern matching and transformation.
• ECLAIR – A platform for the automatic analysis, verification, testing and transformation of C and C++ programs.
• Eclipse (software) – An open-source IDE that includes a static code analyzer (CODAN).
• Fluctuat – Abstract interpreter for the validation of numerical properties of programs.
• Frama-C – An open-source static analysis framework for C.
• Goanna – A software analysis tool for C/C++.
• GrammaTech CodeSonar – Defect detection (Buffer overruns, memory leaks, ...), concurrency and security checks, architecture visualization and software metrics for C, C++ and Java source code.
• Lint – The original static code analyzer for C.
• LDRA Testbed – A software analysis and testing tool suite for C/C++.
• Parasoft C/C++test – A C/C++ tool that does static analysis, unit testing, code review, and runtime error detection; plugins available for Visual Studio and Eclipse-based IDEs.
• PC-Lint – A software analysis tool for C/C++.
• Polyspace – Uses abstract interpretation to detect and prove the absence of certain run time errors in source code.
• PVS-Studio – A software analysis tool for C, C++, C++11, C++/CX (Component Extensions).
• PRQA QA·C and QA·C++ – Deep static analysis of C/C++ for quality assurance and guideline/coding standard enforcement.
• SLAM project – a project of Microsoft Research for checking that software satisfies critical behavioral properties of the interfaces it uses.
• Sparse – An open-source tool designed to find faults in the Linux kernel.
• Splint – An open-source evolved version of Lint, for C.