Source Code Analysis of Flight Software using a SonarQube based Code Quality Platform

摘要

Since 2012, Spazio IT and Inopus have been working on a code quality platform for the analysis of both Ada and C/C+ + flight software. For Ada (e.g. AIRBUS Helicopters NH90 and Tiger flight software), the emphasis has been on maintenance and particularly on the adoption of ISO/IEC 25010:2011 software characteristics to identify critical areas in large Ada codebases. For C/C++ (e.g. European Space Agency IXV on board software), the emphasis has been on verification and validation, standards/guidelines enforcement and bug finding. Of particular interest is the development of a methodology able to apply in an effective way model checking and abstract interpretation techniques to large C/C+ + code bases. This paper describes both activities and shows the central role that SonarQube and Spazio IT developed plugins have plaid in their execution. Keywords: Static Analysis, Ada, Quality Model, Characteristic, Metric, Measure, Maintenance, Maintainability, C/C++, Bug Finding, Bounded Model Checking, Abstract Interpretation, CBMC, Frama-C.