Static Code Analyzer

General

Name: Static Code Analyzer
Tool Provider:

Any tool which aids in checking the code for conformance to MISRA
Supported Standards: ISO26262
Description:

The static code analyzer is used to check the code for conformance to MISRA.
Use Cases:

Content

Use Cases

Check MISRA

Safety-Impact: yes
Features:
  • Verify MISRA rules:

    Verify whether given .c/.h files satisfy MISRA rules
Potential errors:
# Error Safety-Impact Mitigations for detections/avoidance Final detection/avoidance probability
1 [Verify MISRA rules] Non existent violation of MISRA rule detected

Safety fault in product code detected although there is no violation


Comment:

This error has no impact on safety.

 impact_false
/
 HIGH
2 [Verify MISRA rules] Violation Of MISRA Rule Overseen

Safety fault in product code due to overseen violation of MISRA rule checked by the static code analyzer.

 impact_true HIGH

Qualifications

Qkit_MISRA

Description:

The QKit is a standard Validas QKit using QST and TAU that automatically executes the qualification tests in the user environment.

This Qualification Kit from Valdidas is used to qualify the Static Code Analyzer tool.

Details on the planning and tests are removed for confidentiality reasons.
Qualfication method:

VALIDAS_QKIT
Use Cases:

Test suites and test cases

TestSuite for Static Code Analyzer

Description:

This testsuite contains tests for use cases described in the model
Flags: Has Requirements Based Tests , Has Negative Tests , Has Boundary Tests , Has Equivalence Tests , Has Error Guessing Tests
# tests: 74
Errors:
  • Violation Of MISRA Rule Overseen

Mitigations

# Mitigation Detection/Avoidance probability Detected/Avoided errors
1 [Check] Verify Code Review Checkpoints.

Checks if code adheres to the criteria defined in the code review checklist.

 HIGH
  • Violation Of MISRA Rule Overseen
2 [Check] Redundant MISRA checker tool

In case a safety fault in the code is overseen by one static code analyzer tool due to errors in the rule check, there is a high alternative detectability for detecting runtime faults via a second static code analyzer tool.

 HIGH
  • Violation Of MISRA Rule Overseen