Does anyone know an open-source and/or free code-scanner for automated code analysis in C#, C or C++?
I know for Java there's some brilliant stuff like FindBugs (Eclipse integrated), PMD, or Hammurapi.
Is there anything similar for the C-languages?
wishi
Helix QAC is an excellent static analysis testing tool for C and C++ code from Perforce (formerly PRQA). The tool comes with a single installer and supports platforms like Windows 7, Linex Rhel 5 and Solaris 10.
CppDepend is a commercial static code analysis tool for C++.
A static analyzer meant to search for backdoors and vulnerabilities, which allows to detect and eliminate security issues on the source code level. Supports a wide range of programming languages: Java, C#, Visual Basic, C/C++, Ruby, JavaScript, Perl and others.
FxCop is a free scanner for .Net.
http://msdn.microsoft.com/en-us/library/bb429476(vs.80).aspx
For .NET languages, you can look at Reflector CodeMetrics which provides some code analysis and design metrics. Also take a look at all of the Reflector addins.
I also second the recommendation for FxCop and StyleCop.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With