Klocwork

As teams develop code with more features, shorter timelines, and stricter standards than ever before, it gets increasingly difficult to find bugs and fix security flaws. With this complexity, how do we stop data breaches and application crashes before they’re passed on to the customer? How do we find them earlier in the process, so developers can spend more time creating real value for the customer rather than fixing defective code? Klocwork on-the-fly static code analysis and peer code review helps developers create more secure and reliable software.

Static code analysis

It starts at the developer’s desktop. It’s here where code is written, tested, reviewed, and written again. Finding problems here, at the earliest possible point before the build, means less testing later on and fewer downstream impacts to cost and schedule.

It continues with Continuous Integration (CI), only Klocwork supports popular CI tools to perform analysis on incremental code changes, during check in, to keep pace with rapid release delivery cycles. Klocwork puts static code analysis where you need it, identifying critical safety, reliability, and coding standards issues in front of developers’ eyes – before, during, and after check in.

Klocwork marks security weaknesses and code errors in your code as you type. Think of it as a spell checker for C/C++, Java or C# source code. Investigate the depth of the issue with the traceback path, which identifies and describes each of the statements in the code that are contributing to a particular issue. Get details on each issue or security risk with Klocwork best practices links in the context-sensitive help for additional information on a particular area of software security.

Klocwork ships with hundreds of checkers. Our static code analysis engine can be tailored to enforce the rules for compliance with each standard by enabling or disabling individual checkers or full checker groups to meet the specific needs of your software development environment and processes. We’ve also worked with some of the largest consumer, military, communications, electronic, mobile and other companies in the world to create a checker API, providing your teams the ability to quickly and easily create customized security checkers.

Code review

Klocwork code review brings all of our safety, reliability, and coding standards defects into a collaborative problem-solving environment, so your teams can fix them faster. With all the features of a standard code review tool, such as smart diffs and integration into your source code management system, Klocwork is already on top of your review game. Adding in social notifications, threaded discussions, and an infinite activity wall, developers are always informed and instantly able to help solve the latest defects and create better code.

Developers can start, participate in, or follow reviews with just one click – for any type of code or text file. The review space can be designed and customized to suit individual needs by monitoring relevant projects, creating interest areas, and getting notified of only the things that matter. With analysis results and issues integrated right into the review space, developers work together in real-time to trace, comment, and fix issues without leaving their desktops. Once fixed, changes are easily checked in with support for several SCMs, including Git, Perforce, Subversion, ClearCase, and CVS.

Klocwork brings social collaboration to solving coding issues, combining skillsets and sharing this learning across teams. Here’s just a few of the ways in which Klocwork speeds up code reviews:

• Every developer has real-time notifications and a customizable activity wall, instantly seeing when and where they can help out
• Personal backlogs, to-do lists, and a rich search grammar, allow anyone to quickly determine the current state of their defect-reduction activities
• Relevant actions can be assigned to authors, other reviewers, or even unrelated parties to focus work better
• Highly customizable, visual reports present data about individuals and teams, identifying areas that provide real value or those needing follow-up

Custom checkers

SDC Systems have worked with a number of our existing Klocwork customers to produce custom checkers and taxonomies in order to find code defects that the standard Klocwork checkers don’t look for. These can be as simple as checking that there is no use of the goto statement in C code to complex checkers that enforce stricter rules when using C++ classes and inheritance.

About Rogue Wave Software

Rogue Wave Software are the largest independent provider of cross-platform software development tools and embedded components in the world. Through decades of solving the most complex problems across financial services, telecommunications, healthcare, government, academia, and other industries, Rogue Wave tools, libraries, and services enable developers to write better code, faster. More details…

Find out more…

For more information on the Klocwork static analysis and code reviews and how they can be deployed within your organisation, including a 7-day free trial, please complete the form below.