Static Analysis at Bosch

Astrée proves the absence of runtime errors and invalid concurrent behaviors in embedded C programs. The runtime errors covered include safety-relevant program defects and cybersecurity vulnerabilities, e.g. divisions by zero, out-of-bounds array accesses, buffer overflows, dangling and null pointers accesses, … .

RuleChecker computes code metrics and checks coding guidelines for C/C++ programs, including MISRA C/C++, CWE, ISO/IEC TS 17961, and SEI CERT C.

“We are happy to see that our recent efforts to speed up the analysis for huge code bases and the recent extensions to handle data races and inconsistent locking and C++ have paid off”, said Dr. Christian Ferdinand, CEO of AbsInt.

With the support of AbsInt, the two analyzers were integrated into the development and verification processes for steering systems at the division automotive steering of Bosch as a pilot project within Bosch.

Bosch also licensed the qualification modules for Astrée and RuleChecker. They contribute to an automatic tool qualification process, e.g. with regard to ISO 26262.

The driving factors for Bosch to switch to AbsInt tools were the faster analysis speeds, improved accuracy and less time needed for results reviews compared to previously used tools, and flexible licensing policy by AbsInt.