Static-code analyzer: unmanaged C++ Visual Studio 2008

Question

I develop commercial unmanaged C++ app on Visual Studio 2008, and I want to add a static-code analysis tool.

Any recommendations?

I think it would be real nice if the tool can be integrated into MSVC.

I'm thinking about PC-Lint + Visual Lint

However, I have been taking a hard look at Coverity, Understand, and Klockwork as well.

Price isnt really the issue. I want opinions from people who actually used the tool for unmanaged C++ on MSVC, and they just absolutely loved it.

Lastly, VSTS and Intel Parallel Studio now also offer static code analysis. Nice~

Note: related post suggest Coverity is the best (?) (see last 2 posts)

Answer 1

Beyond all those you mentioned, VS Team Developer edition comes bundled with a nice static analysis tool called prefast. Its (obviously..) well integrated into the IDE, and accessible via the menus. Its in fact a public release of an MS internal tool - a thin version of a tool called Prefix they run on their builds. Personally, when I faced the same decision, prefast sufficed.