Is there anything like PPI or Perl::Critic for C?

Question

PPI and Perl::Critic allow programmers to detect certain things in the syntax of their Perl programs.

Is there anything like it that will tokenize/parse C and give you a chance to write a script to do something with that information?

score 17 · Answer 1 · answered Dec 17 '09 at 20:07

C related programs:

BLAST (Berkeley Lazy Abstraction Software verification Tool) — a software model checker for C programs based on lazy abstraction.
Clang — A compiler that includes a static analyzer.
Frama-C — A static analysis framework for C.
Sparse — A tool designed to find faults in the Linux kernel.
Splint — An open source evolved version of Lint (C language).

List of tools for Static Code Analysis for C (more than the list above)

score 13 · Answer 2 · answered Dec 17 '09 at 20:04

There is an open source program called Splint:

Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. With minimal effort, Splint can be used as a better lint. If additional effort is invested adding annotations to programs, Splint can perform stronger checking than can be done by any standard lint.

score 11 · Answer 3 · edited Dec 17 '09 at 20:05

11

If I remember correctly, that's what lint does.

edited Dec 17 '09 at 20:05

Sinan Ünür

116,958
15
196
339

answered Dec 17 '09 at 20:02

ennuikiller

46,381
14
112
137

1

Lint looks at more than just syntax, it also looks for fishy constructs like using a variable before setting them. – Ben S Dec 17 '09 at 20:03

score 5 · Answer 4 · answered Dec 18 '09 at 05:31

5

It's a little off topic, but on the subject of valuable code analyzers for C is valgrind to catch dodgy memory management.

answered Dec 18 '09 at 05:31

Schwern

153,029
25
195
336

Is there anything like PPI or Perl::Critic for C?

4 Answers4