Code analysis tools

Arm Compiler  can detect basic syntax problems in the code but for deeper code inspection it is recommended to use static code analysis tools. Such tools automatically examine your source code without executing the program itself. They report vulnerabilities in the code that can lead to potential issues. This includes bugs, glitches, inconsistencies, non-portable constructs, redundant code, and other weaknesses.

Integrating static code analysis in the development flow brings multiple benefits such as:

• Better maintainable code conforming to specified code-style
• Reduced error-rate, more reliable and secure software
• Fulfilling requirements of safety standards

PC-lint by Gimpel Software is a powerful static analysis tool that will check your C/C++ source code. Each of the Keil development tools, MDK, C51,C251, and C166, support PC-lint. 

The LDRA tool suite provides static analysis, unit testing and dynamic analysis capabilities for functional safety. Specifically LDRArules can be used to enforce compliance with industry- or user-defined coding standards and provides clear visibility of software flaws that might typically pass through the build and test process and become latent problems.

Parasoft C/C++test provides a complete quality testing solution which improves software development team productivity and software quality for C and C++ applications. C/C++test uses the high-speed streaming trace capabilities of the ULINKpro adapter to capture performance and code coverage information which can then be analyzed using the Keil MDK development kit. C/C++test provides in-built wizards which enable you to quickly begin working with µVision projects.

PVS-Studio is a tool for detecting bugs and security weaknesses in the source code of programs, written in C, C++, C# and Java. Read more about PVS-Studio for embedded development.

The VectorCAST embedded software testing platform is a family of products that automates testing activities across the software development lifecycle. 

VectorCAST/C++ significantly reduces the time, effort, and cost associated with testing C/C++ software components necessary for validating safety and mission-critical embedded systems.