Klocwork Static Analysis Programs: Someone to Watch over You

If you were an embedded systems software engineer, a very smart assistant who could check programs for you would be invaluable. Embedded systems are designed to perform a very specific and limited array of functions in systems ranging from consumer handheld devices to complex machine tools.

Because changing embedded software is relatively expensive, it is critical that the software is right the first time. A smart assistant would check your program to make sure that there were no errors. Klocwork, a Burlington, Massachusetts company, has developed static code analysis programs that are, in effect, that smart assistant.

Klocwork’s K7 is defined as providing static analysis because the code does not need to be run for the analysis to occur. Static analysis is a procedure for analyzing source code to gain an understanding of what the software does and to establish correctness criteria.

The programs can then check the software for defects and security vulnerabilities. This occurs at "Time Zero," directly as the developer is creating the code, before it is submitted for check-in or integration/system build and long before QA is engaged on the system. The static analysis program performs the function of a very skilled code review team.

Klocwork's programs are for companies who build C, C++ or Java applications and need to minimize software development time while eliminating errors and security vulnerabilities.

Semico Spin

A typical method for testing software is to write the code, build the device and then run the code. If it doesn’t work, go back at ground zero, fix the problem and run the code again. This may require several cycles. Klocwork’s static analysis programs offer a way to better this by checking the code as soon as it is written and eliminating errors before running the code.