NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc. (opens in new tab)

(github.com)

45 pointsxjia2y ago13 comments

13 comments

dang2y ago

Recent and related:

Misra C++:2023 - https://news.ycombinator.com/item?id=38674158 - Dec 2023 (85 comments)

Oh gosh, AUTOSAR... shudder

The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?

xjiaOP2y ago

No. Using GPL software has nothing to do with the code processed by it. Think about the GCC compiler :)

mcqueenjordan2y ago

I think just using it locally in manual or ad-hoc senses is fine, but IIRC it can become tricky or at least a legal grey area if you commit code that automates using GPL developer tooling and/or pulls it into your development toolchain, e.g. via GitHub action or some other CI automation.

Disclaimer: Not a lawyer, this isn't legal advice.

girvo2y ago

Totally fair :) I'm going to have a play with it at work!

1 more reply

1over1372y ago

I'm sure this is lovely software, and I'll probably try it, but...

Why is software so difficult to install these days? Why on earth should one need docker to build and run some C code? Why can't one just download an executable?

xjiaOP2y ago

If you build it from source it's actually a bunch of regular executables. Running as a container is for the purpose of making the environments hermetic/reproducible so that it's easier to support users.

1over1372y ago

How do you conclude that? The instructions here:

https://github.com/naivesystems/analyze/wiki/How-to-run-on-m...

say docker is required.

1 more reply

j / k navigate · click thread line to collapse

13 comments

dang2y ago

Recent and related:

Misra C++:2023 - https://news.ycombinator.com/item?id=38674158 - Dec 2023 (85 comments)

girvo2y ago

Oh gosh, AUTOSAR... shudder

The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?

xjiaOP2y ago

No. Using GPL software has nothing to do with the code processed by it. Think about the GCC compiler :)

mcqueenjordan2y ago

Disclaimer: Not a lawyer, this isn't legal advice.

girvo2y ago

Totally fair :) I'm going to have a play with it at work!

1 more reply

1over1372y ago

I'm sure this is lovely software, and I'll probably try it, but...

Why is software so difficult to install these days? Why on earth should one need docker to build and run some C code? Why can't one just download an executable?

xjiaOP2y ago

1over1372y ago

How do you conclude that? The instructions here:

https://github.com/naivesystems/analyze/wiki/How-to-run-on-m...

say docker is required.

1 more reply

j / k navigate · click thread line to collapse