Deep Java source code analysis

GrammaTech announced CodeSonar for Java which works on all Java code, including code written for Android.

The analysis flags quality and security defects. It also works seamlessly with CodeSonar for C/C++, allowing developers to analyze code written in multiple languages and manage warnings in a single location, saving time.

CodeSonar for Java also works in parallel with the popular open-source Java static-analysis engines FindBugs and PMD. Results calculated by FindBugs and PMD are automatically imported into CodeSonar, where developers can take advantage of CodeSonar’s superb warning management infrastructure and reporting.

Among the benefits are easier and richer annotation of warnings, tracking of code-level metrics and visualization of quality trends. Users are also able to leverage CodeSonar’s numerous workflow automation features, such as the automatic assignment of a warning to the developer that made relevant modifications to the file.

CodeSonar has long been the software-analysis tool of choice for embedded developers working on mission-critical applications such as satellites, avionics, industrial controls and medical devices.

Companies outside the safety-critical space are also adopting CodeSonar to improve software reliability and security. This includes organizations developing software for wireless devices, networking equipment and consumer electronics.