...
Tool | Version | Checker | Description | ||||||
---|---|---|---|---|---|---|---|---|---|
Astrée |
| Supported, but no explicit checker | |||||||
Clang |
| cert-msc30-c | Checked by clang-tidy | ||||||
CodeSonar |
| BADFUNC.RANDOM.RAND | Use of rand | ||||||
Compass/ROSE |
|
|
| ||||||
Coverity |
| DONTCALL | Implemented - weak support | ||||||
| CC2.MSC30 | Fully implemented | |||||||
LDRA tool suite |
| 44 S | Enhanced enforcement | ||||||
Parasoft C/C++test | 9.5
| SECURITY-02 | Fully implemented | ||||||
Polyspace Bug Finder | R2016a | Vulnerable pseudo-random number generator | Using a cryptographically weak pseudo-random number generator | ||||||
PRQA QA-C |
| 5022 | Fully implemented |
...