IAR Systems, announced the availability of a major update to its static code analysis tool, C-STAT, which is incorporated into the C/C++ compiler and debugger toolchain, IAR Embedded Workbench. The updated version of C-STAT extends its compliance into complete coverage for the CERT C Coding Standard.

C-STAT is an add-on tool to IAR Embedded Workbench and performs advanced code analysis to find potential issues. The analysis provides code alignment with industry standards like MISRA C:2012, MISRA C++:2008 and MISRA C:2004. Furthermore, it detects defects, bugs, and security vulnerabilities as defined by the Common Weakness Enumeration (CWE) and CERT C.

The CERT C Coding Standard, which is developed and owned by the Software Engineering Institute at Carnegie Mellon University, provides rules for secure coding in the C programming language. The goal of these rules and recommendations is to develop safe, reliable, and secure systems, for example by eliminating undefined behaviors that can lead to undefined program behaviors and exploitable vulnerabilities.

For more information, visit www.iar.com/cstat.