Java has some very good open source static analysis tools such as FindBugs, Checkstyle and PMD. Those tools are easy to use, very helpful, runs on multiple operating systems and free.
Commercial C++ static analysis products are available. Although having such products are great, the cost is just way too much for students and it is usually rather hard to get trial version.
The alternative is to find open source C++ static analysis tools that will run on multiple platforms (Windows and Unix). By using an open source tool, it could be modified to fit certain needs. Finding the tools has not been easy task.
Below is a short list of C++ static analysis tools that were found or suggested by others.
- C++ Check http://sf.net/projects/cppcheck/
- Oink http://danielwilkerson.com/oink/index.html
- C and C++ Code Counter http://sourceforge.net/projects/cccc/
- Splint (from answers)
- Mozilla's Pork (from answers) (This is now part of Oink)
- Mozilla's Dehydra (from answers)
- Use option
-Weffc++
for GNU g++ (from answers)
What are some other portable open source C++ static analysis tools that anyone knows of and can be recommended?
Some related links.
- https://stackoverflow.com/questions/97454/c-static-code-analysis-tool-on-windows
- http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
- http://www.chris-lott.org/resources/cmetrics/
- A free tool to check C/C++ source code against a set of coding standards?
- http://spinroot.com/static/
- Choosing a static code analysis tool
John Carmack also mentions PVS-Studio in this interesting blog post on "Static Code Analysis".
One can also code extensions of GCC in MELT (a domain specific language designed for extending GCC) or GCC plugins in C (much harder) to do some custom analysis.