FOSS Static Analysis Tools for Embedded Systems and How to Use Them

Explore free and open-source static analysis tools for embedded systems in this 42-minute conference talk by Jan-Simon Möller from The Linux Foundation. Gain insights into the motivation behind using these tools for both kernel and userspace development. Learn about local tools such as clang-tidy, scan-build, and cppcheck, as well as meta-sca, a collection of various scanners. Discover the integration of clang static analyzer and clang-tidy through meta-codechecker, including its bitbake integration. Follow a step-by-step example of using meta-codechecker, and conclude with a summary of the pros and cons of these tools, along with future perspectives on static analysis in embedded systems development.

Intro
Topics
Motivation
kernel & userspace
local tools
clang (clang-tidy)
clang (scan-build)
cppcheck
meta-sca - a collection of tools
Available scanners
meta-codechecker - clang-sa/clang-tidy integrated
Overview
meta-codechecker - bitbake integration
meta-codechecker - Example: step-by-step
Summary, pros and cons
Summary & lookout