Software Paradise
Tutorials,Manual

klocwork 2020.3

What’s new in Klocwork 2020.3

Here are the highlights for Klocwork 2020.3. If you’re upgrading, also see the Limitations for items that affect how you use Klocwork.

Java

Building on our improvements to have full support for Java 9 in Klocwork 2020.2, we have added partial support up to Java 11.

We’ve made improvements to better support for Java constructions such as

  • enums
  • interfaces
  • annotations
  • lambda functions
  • wildcards

We’ve added a substantial number of new checkers that map to the 2019 CWE Top 25 Most Dangerous Software Errors:

  • CWE-611: SV.XXE.DBF, SV.XXE.SF, SV.XXE.SPF, SV.XXE.TF, SV.XXE.XIF, SV.XXE.XRF
  • CWE-426: SV.EXEC.PATH
  • CWE-400: JD.INF.ALLOC
  • CWE-20: SV.LOADLIB.INJ

We improved the 2019 top-25 CWE taxonomy for Java by simplifying the mapping structure, mapping existing checkers SV.PASSWD.PLAIN and SV.WEAK.CRYPT to CWE-287, and correcting a small number of incorrect mappings.

We’ve also made improvements to existing checkers:

  • split JD.CAST.COL into JD.CAST.COL.MIGHT and JD.CAST.COL.MUST
  • reduced false positives for SV.EXPOSE.MUTABLEFIELD

CWE Top 25

The checkers we’ve developed for Java and C# add coverage for several additional 2019 CWE Top 25 Most Dangerous Software Errors. For more information, see 2019 CWE Top 25 Most Dangerous Software Errors mapped to Klocwork checkers.

C# enhancements

In this release we’ve continued improving support for C# by

  • developing six new security-focused checkers that map to the 2019 CWE Top 25 Most Dangerous Software Errors
  • improving analysis accuracy
  • adding support for custom Path checkers in C# analysis. For help developing custom Path checkers, contact Static Code Analysis Professional Services to discuss assistance via a services engagement.

C/C++ analysis improvements

We have updated our C/C++ Logical Error Finder to 64-bit on Windows, which enables Klocwork analysis to run to completion on very large and complex compilation units. We also now support 64-bit custom checkers.

We have seen minor performance improvements on some of our OSS test projects.

We’ve also improved how we handle new and delete keywords and initializer lists.

MISRA C 2012 Amendment 2 (C11)

We’ve added a new taxonomy that maps Klocwork checkers to MISRA C 2012 Amendment 2 (C11). For more information, see MISRA-C 2012 with Amendment 2 (C11) checker reference.

Option to rebuild Lucene index

We’ve added an option to the dbvalidate tool that rebuilds the Lucene index for the specified project, which often reduces the size of the index. For more information, see Validate your database (mandatory).

Klocwork checker improvements

From release to release, we improve issue detection to bring state-of-the-art capabilities to our customers. As a result, expect your analysis results to change as accuracy and coverage improve.

Product: klocwork 2020.3
Version: 2020.3
Supported Architectures: x64
Language: english
Supported Operating Systems: Windows 7even or newer
Size: 1DVD