Coverity code analyzer to integrate with Wind River Linux embedded tools

By Eric Brown
2012-01-25

Article Rating:

/ 0

Rate This Article:

Add This Article To:

Coverity is readying an evaluation edition of a security analysis package pre-configured for Wind River Workbench and Wind River Linux. Coverity Static Analysis for Wind River Workbench integrates security within the embedded development process, identifying vulnerabilities as code is written, according to Wind River.

Software integrity firm Coverity offers a variety of software development analysis software packages designed to fix defects and security vulnerabilities. Now one of them -- Coverity Static Analysis – has been tailored to work hand in hand with Wind River Workbench in versions compatible with Wind River Linux and Wind River's VxWorks real-time operating system (RTOS).

Coverity Static Analysis

Wind River Workbench is an integrated development environment (IDE) billed as "a fully integrated end-to-end, open standards-based collection of tools for device software design, development, debugging, testing and management." By integrating Wind River Workbench with the Coverity software, development teams can build security directly into the embedded software development process and address security vulnerabilities as software code is written, says Intel subsidiary Wind River.

Coverity Static Analysis is said to automatically scan C/C++, Java, and C# source code for security and quality defects, exposing them in the developer's existing workflow. As a result, developers can detect and fix errors before passing applications to quality assurance teams.

At that point, developers can then turn to Wind River Test Management -- a test automation system designed to work closely with Wind River Workbench. Test Management can be used during the quality assurance phase of the lifecycle to test specific packages for security, says Wind River.

Coverity Static Analysis can scale to hundreds of users, thousands of defects, and millions of lines of code in a single analysis, which can be run on up to eight cores simultaneously, says Coverity. The software is claimed to offer the most accurate analysis and lowest false positive rate in the industry.

Parallel and incremental analyses for C/C++ allow code to be analyzed in minutes, and users can choose to limit analysis to files which have been changed or were impacted by a change, says the company. The software integrates a Coverity Integrity Manager user interface that lets developers quickly find code defects, easily understand defects and their impact, prioritize defects based upon severity, and identify all of the places a defect exists across projects and products, according to Coverity.

Stated Marc Brown, vice president of Tools and Marketing Operations, Products Group at Wind River, "Increased security threats and continued growth of embedded device connectivity create an urgent need to address security during development."

Availability

No pricing or availability information was provided for the Coverity Static Analysis for Wind River Workbench evaluation software. More information and availability notification signup may be found on this Wind River Coverity web-page, as well as Coverity's Coverity Static Analysis page.

Coverity and Wind River will be discussing their joint solution at RSA 2012 -- which features a keynote from former British Prime Minister Tony Blair -- to be held Feb. 27 through March 3, at the Moscone Center in San Francisco, Booth #555.

Eric Brown can be reached at eric.brown@ziffdavisenterprise.com.

Related Stories:

	Discuss Coverity code analyzer to integrate with Wind River Linux embedded tools

	>>> Be the FIRST to comment on this article!



	>>> More News Articles >>> More By Eric Brown

Email Article To Friend ♦ Print Version Of Article ♦ PDF Version Of Article

FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.

Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.

Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.

Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.

High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.

Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.

Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.

Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.

7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.