Is there a code analysis tool that will flag code that violates these rules?

wyldfire · on April 4, 2017

Elsewhere on the SEI site there are some checkers [1] [2]. They also advocate using clang's "-Wthread-safety" among others. It doesn't sound to me like there exists a tool that will measure this coding standard as conformance criteria.

[1] https://github.com/SEI-CERT/scvs

[2] https://sourceforge.net/projects/rosecheckers/

bliker · on April 4, 2017

Clang tidy supports some of the rules http://clang.llvm.org/extra/clang-tidy/

EliRivers · on April 5, 2017

If you're on someone else's budget, there are some commercial tools that flag against various coding standards.

A quick check on something I half remembered shows these people say they cover CERT; http://www.programmingresearch.com/coding-standards/complian...

I know there are more.