GrammaTech CodeSonar Selected by Crank Software

GrammaTech (News - Alert), Inc., a software developer specializing in software assurance tools, recently announced that its CodeSonar has been selected by Crank Software, Inc., a company that provides embedded graphical user interface (GUI) solutions, to advance the integrity of its code.

CodeSonar, GrammaTech's flagship product, identifies programming bugs that can result in system crashes, memory corruption, and other serious problems. Its static analysis engine requires no changes to the existing build system or code. It performs whole-program analysis on codebases over 10 million lines of code. CodeSonar also includes workflow automation features, like an API for custom integrations and support for extensions that add custom checks.

CodeSonar's source code analysis engine identifies problems that developers care about finding, like data races, deadlock, buffer overruns, leaks, null-pointer dereferences, and uninitialized variables. Moreover, its binary analysis finds vulnerabilities and defects in machine code (both whole executables and libraries), so the user can perform a security analysis even if source code is unavailable.

 “We wanted an innovative, high-performance static analysis tool we could drop into our process and quickly see improvements,” explained Thomas Fletcher, VP of Research and Development at Crank Software. Now that Crank’s development teams have integrated CodeSonar into their production process, quantifiable results have reinforced their choice to adopt the powerful tool. “Issues are being caught and fixed very early in the coding process. I look at these as problems I won’t have to hassle with in QA, and most critically, calls to customers I will never have to make,” he said.

CodeSonar provides Crank’s team with a high quality solution that integrates well and allows Crank’s engineers to fix problems early in development, saving time. As a result, they’ve also improved their end product and Crank Software is now feeling better-positioned for the certifications it wants to achieve to drive greater adoption. As Fletcher explained, “We wanted a comprehensive tool to push the quality and security of our software forward. And we got exactly what we aimed for.”