What's new in Klocwork 2019.2
Here are the highlights for Klocwork 2019.2. If you're upgrading, also see the Limitations for items that affect how you use Klocwork.
New taxonomy
We've added a new taxonomy that covers ISO/IEC TS 17961. ISO/IEC TS 17961 enumerates secure coding rules to diagnose insecure code beyond the requirements of the C language standard. For more information, see ISO/IEC TS 17961 C rules mapped to Klocwork Checkers.
Support for Visual Studio 2019
We're pleased to announce that we now support Visual Studio 2019 (Visual Studio Extension).
MISRA C 2012 new rules
Our enhanced coverage for MISRA C 2012 now includes checkers to support Rules 21.13 and 21.19.
Move to Open JDK
We've improved our support for Java by migrating to Open JDK on Linux and Windows.
Clearer build analysis reporting
Building on our changes from release 2019.1, we’ve extended our build analysis reporting and logging improvements to our Desktop analysis tools.
Build analysis improvements
Projects using multiple compilers will now see more accurate analysis results for C++ 14 and C++ 17. We've also improved data tracking in inter-procedural analysis when opaque pointer interfaces are used.
Changes to PATH API
We've added a new function into the kpa API: getFrontendLanguage(), as well as two new constants: LANGUAGE_C and LANGUAGE_CXX.
Updates to help
We've updated the look and feel of the help we include with the Portal and desktop analysis plug-ins.
Licensing
2018 licenses are not compatible with Klocwork 2019.2. You need a new license to use the latest version of the product. Contact license@roguewave.com to obtain a new license.
Improvements to supported compilers
We've improved support for the following compilers:
- Archelon CSR Kalimba C
- Clang
- GNU
- Green Hills
- IAR Systems C compiler/linker for ARM
For the full list of supported C/C++ compilers, see C/C++ compilers supported for build integration.
Checker improvements
From release to release, we improve issue detection to bring state-of-the-art capabilities to our customers. As a result, expect your analysis results to change as accuracy and coverage improve.
New checkers
| Checker | Description |
|---|---|
| MISRA.STDLIB.CTYPE.RANGE.2012_AMD1 | Implements MISRA C 2012 Rule 21.13: Any value passed to a function in <ctype.h> shall be representable as an unsigned char or be the value of EOF. |
| MISRA.STDLIB.ILLEGAL_WRITE.2012_AMD1 | Implements MISRA C 2012 Rule 21.19: The pointers returned by the Standard Library functions localeconv, getenv, setlocale or, strerror shall only be used as if they have pointer to const-qualified type. |
Enabled or disabled checkers
No changes were made to the default enabled field of the checker configuration files for this release.
Taxonomy improvements
As part of our installation, we offer several custom taxonomy files that map our checkers to standards such as MISRA, CWE, OWASP and DISA STIG.
| Taxonomy | Updates |
|---|---|
| iso_iec_ts_17961_c.tconf and iso_iec_ts_17961_c_ja.tconf | These are new taxonomies that map Klocwork checkers to the ISO/IEC TS 17961 C secure coding rules. |
| misra_c_2012_with_amd1_c90.tconf and misra_c_2012_with_amd1_c90_ja.tconf |
We added references to the following checkers: MISRA C 2012 Rule 21.13: Any value passed to a function in <ctype.h> shall be representable as an unsigned char or be the value of EOF.
MISRA C 2012 Rule 21.19: The pointers returned by the Standard Library functions localeconv, getenv, setlocale or, strerror shall only be used as if they have pointer to const-qualified type.
|
| misra_c_2012_with_amd1_c99.tconf and misra_c_2012_with_amd1_c99_ja.tconf |
We added references to the following checkers: MISRA C 2012 Rule 21.13: Any value passed to a function in <ctype.h> shall be representable as an unsigned char or be the value of EOF.
MISRA C 2012 Rule 21.19: The pointers returned by the Standard Library functions localeconv, getenv, setlocale or, strerror shall only be used as if they have pointer to const-qualified type.
|
End of support announcement
Klocwork 2018.3 was the last supported release of the Klocwork Portal and License Server on the following platforms: AIX, Mac, and Solaris. Rogue Wave is also here to help! If you need help moving your Klocwork Portal or License Server to Linux or Windows, you can contact Rogue Wave Professional Services to discuss assistance via a services engagement.
Changes to system requirements
- Debian 9.9
- Ubuntu 18.04.2 LTS and 19.04
- Fedora 30
- SUSE Enterprise/Leap 15
- macOS 10.14.4
- Eclipse 4.12
- Android Studio 3.4
- Visual Studio 2017 up to version 15.9.11
- Visual Studio 2019 up to version 16.0.3
- IntelliJ IDEA 2018.x up to 2018.3.6, 2019.1
- Internet Explorer 11.0.x to 11.0.115
- Mozilla Firefox 66.x.x
- Google Chrome versions 54.x to 74.x
- Safari 9.1.x to 12.1
- Jenkins 1.58 to 2.174
- TeamCity 9.13 to 2018.2.4
We now ship Open JDK 1.8.0_202 with Linux and Windows.
Klocwork now uses MariaDB 10.0.38.
Changes to commands, tools, and options
We added an option to enable/disable Code Review in the Visual Studio Extension.
We've introduced the --short log option for the Eclipse and Eclipse-based plugins, Klocwork Desktop, and the kwcheck and kwciagent commands.
For more information about Klocwork commands, see Command Reference.