Static analysis finds potential issues in code by doing an analysis on the source code level. Such errors as memory leaks, access violations, arithmetic errors and array and string overruns can cause security issues and affect the performance and quality of a product. By using static analysis, developers can identify these errors early and minimise their impact on the finished product and the project timeline.
In addition to raising the code quality, the analysis can aid alignment with industry coding standards. C-STAT is a powerful static analysis tool that checks compliance with rules as defined by the coding standards MISRA C:2004, MISRA C++:2008 and MISRA C:2012, as well as hundreds of rules based on, for example, CWE and the CERT C/C++ Secure Coding Standards. Users can easily select which rule set and which individual rules to check the code against; the analysis results are provided directly in the IAR Embedded Workbench IDE.