IAR Systems simplifies full CERT C compliance in leading embedded development tools

Extended static code analysis capabilities in IAR Embedded Workbench aid developers in ensuring secure and high-quality code in a straightforward way

Uppsala, Sweden—February 17, 2020—IAR Systems®, the future-proof supplier of software tools and services for embedded development, announces the availability of a major update of its static code analysis tool C-STAT® in the complete C/C++ compiler and debugger toolchain IAR Embedded Workbench®. In addition to the already broad compliance with industry coding standards defined by MISRA and CWE, the updated version of C-STAT extends its compliance into complete coverage for the CERT® C Coding Standard.

The CERT C Coding Standard, which is developed and owned by the Software Engineering Institute at Carnegie Mellon University, provides rules for secure coding in the C programming language. The goal of these rules and recommendations is to develop safe, reliable, and secure systems, for example by eliminating undefined behaviors that can lead to undefined program behaviors and exploitable vulnerabilities.

C-STAT is an add-on tool to IAR Embedded Workbench and performs advanced code analysis to find potential issues. The analysis provides code alignment with industry standards like MISRA C:2012, MISRA C++:2008 and MISRA C:2004, and also detects defects, bugs, and security vulnerabilities as defined by the Common Weakness Enumeration (CWE) and CERT C. It is fully integrated with the IAR Embedded Workbench IDE, enabling static analysis in a straightforward way and as a natural part of a developer’s daily development workflow. This helps developers to ensure their code is safe and of high quality at an early stage, which also aids companies to shorten their time to market as impact of errors further down the line might be very time consuming and expensive.

C-STAT was launched in 2015 as a response to customers’ requests on static code analysis early in the development cycle. Since then, IAR Systems has continuously refined its technology to meet new demands and standards. IAR Systems is showcasing its latest technology, including the updated C-STAT, at embedded world 2020, in Nuremberg, Feb 25-27, in booth 5-340. To read more about C-STAT, visit www.iar.com/cstat.

### Ends

Editor's Note: IAR Systems, IAR Embedded Workbench, Embedded Trust, C-Trust, IAR Connect, C-SPY, C-RUN, C-STAT, IAR Visual State, IAR KickStart Kit, I-jet, I-jet Trace, I-scope, IAR Academy, IAR, and the logotype of IAR Systems are trademarks or registered trademarks owned by IAR Systems AB. All other product names are trademarks of their respective owners.

About IAR Systems

IAR Systems supplies future-proof software tools and services for embedded development, enabling companies worldwide to create the products of today and the innovations of tomorrow. Since 1983, IAR Systems’ solutions have ensured quality, reliability and efficiency in the development of over one million embedded applications. The company is headquartered in Uppsala, Sweden and has sales and support offices all over the world. Since 2018, Secure Thingz, a provider of advanced security solutions for embedded systems in the IoT, is part of IAR Systems. IAR Systems Group AB is listed on NASDAQ OMX Stockholm, Mid Cap. Learn more at www.iar.com.