SuperTest and Frama-C: a clash of titans

CEA List and Solid Sands entered into a partner agreement to make SuperTest available to the Frama-C team. Frama-C is a platform for source-code analysis of C software. The Frama-C analyzers assist with various source-code-related activities, including verifications...

The disadvantages of undefined behavior

In the previous blog I argued in favor of undefined behavior in C. The behaviors I was talking about, such as integer overflow, would be inefficient or counter-intuitive if they were defined. Nevertheless, it does mean that in their current form they cannot be...

The advantages of leaving it undefined

Undefined behavior remains an elusive subject. On the one hand, it potentially exposes your program to dangerous situations and exploitations. On the other hand, it enables the speed and portability that the C programming language is well known for. Let’s look...

Let’s talk about library qualification – in person this time

Library qualification is key, because code from the library is linked into the application and installed onto the target device. Over the last few years, we have spoken many times about this topic in our blogs and webinars. We are glad that we are now finally able to...

We need to talk about security

A study by the University of Turku, Finland (A Large-Scale Security-Oriented Static Analysis of Python Packages in PyPI) showed that 46% of 224,651 open source Python Packages displayed one or more security issues. Is that good news, or bad news? The researchers used...