...
Tool | Version | Checker | Description | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported, but no explicit checker | |||||||||
| Clang |
| cert-msc30-c | Checked by clang-tidy | ||||||||
| CodeSonar |
| BADFUNC.RANDOM.RAND | Use of rand | ||||||||
| Compass/ROSE | |||||||||||
| Coverity |
| DONTCALL | Implemented - weak support | ||||||||
| CC2.MSC30 | Fully implemented | |||||||||
| LDRA tool suite |
| 44 S | Enhanced enforcement | ||||||||
| Parasoft C/C++test |
| SECURITY-02_b | Fully implemented | ||||||||
| Polyspace Bug Finder |
| Vulnerable pseudo-random number generator | Using a cryptographically weak pseudo-random number generator | ||||||||
| PRQA QA-C |
| 5022 | Fully implemented |
...