static code analysis tool to Verifone terminals

Question

Which is the best static code analysis tool to use in the verifone POS projects? Does it have any particularity or I can use any C analysis tool like SonarQube?

Answer 1

Nope, nothing special that would prevent any standard C / C++ static analysis tool from working. I don't know anything about SonarQube specifically, but I've used Klockwork in the past and I run ReSharper C++ currently. In both cases, there was a bit of configuration that needed to be done for it to work properly, but in the end, it worked.

NOTE that the VeriFone terminals use ARM processors, so if your tool was built in such a way that it was specific to the x86/x64 architectures, then you may have some difficulties, but I don't think that will generally be a problem. If I remember correctly, Klockwork stumbled on this and I had to get their tech support involved to get it configured to build for ARM... like I said, if I remember correctly--it was several years ago.