Which is the best static code analysis tool to use in the verifone POS projects? Does it have any particularity or I can use any C analysis tool like SonarQube?
Asked
Active
Viewed 133 times
0
-
Hello. Contact us (PVS-Studio Team): https://www.viva64.com/en/about-feedback/ – AndreyKarpov Jul 04 '17 at 17:02
-
I have used CppCheck. – Mahmoud Hosseinipour Jan 27 '21 at 06:17
1 Answers
2
Nope, nothing special that would prevent any standard C / C++ static analysis tool from working. I don't know anything about SonarQube specifically, but I've used Klockwork in the past and I run ReSharper C++ currently. In both cases, there was a bit of configuration that needed to be done for it to work properly, but in the end, it worked.
NOTE that the VeriFone terminals use ARM processors, so if your tool was built in such a way that it was specific to the x86/x64 architectures, then you may have some difficulties, but I don't think that will generally be a problem. If I remember correctly, Klockwork stumbled on this and I had to get their tech support involved to get it configured to build for ARM... like I said, if I remember correctly--it was several years ago.
David
- 4,665
- 4
- 34
- 60
-
Just a reminder that ReSharper C++ can be used for static analysis for free as a standalone command-line tool (https://www.jetbrains.com/resharper-cpp/download/#section=resharper-clt). – Igor Akhmetov Jul 06 '17 at 15:05
-