Why NPATH is a Terrible Code Metric
I’m on a MISRA committee to specify a standard for code metrics (aka measures) for software quality. The committee was formed...
MISRA C:2012 Rule 1.3 and the Dark Underbelly of C and C++
MISRA C is a set of guidelines for the safe use of the C programming language mainly targeted for its use in safety-critical...
How Sound Static Analysis Complements Heuristic Analysis
Not all static analysis tools work the same, there are in fact a spectrum of tools that use a variety of techniques ranging...
CodeSonar’s Integration with Microsoft Visual Studio
Microsoft Visual Studio continues, at 21 years old, to be a dominant integrated development environment (IDE) for developers of...
Static Analysis Results: A Format and a Protocol: SARIF & SASP
Introduction
Static analysis tools are now very widely used in industry, academia, and open-source, so there is an increasing...