The TrustInSoft Analyzer – an industrial-scale sound code analyzer for proving the absence of bugs and memory safety vulnerabilities in C/C++ code – now includes memory mapping, in addition to its target hardware awareness.
Low-level software relies on mappings between program variables and chipset-specific memory regions. Memory mapping awareness is therefore of high importance when analyzing low-level code that accesses specific memory regions (like bootloaders or device drivers), the supplier explained.
TrustInSoft Analyzer implements a unique feature that faithfully represents these memory mappings thanks to the new TIS Address variable attribute. Thanks to this accurate representation of physical memory access, the TrustInSoft Analyzer can more precisely analyze the behavior of these programs.
Target architecture awareness enables the solution to faithfully emulate hardware features such as endianness, integer and float sizes, and type alignment constraints of a targeted platform. It supports 24 architectures for six processors including x86, PowerPC, ARM, SPARC, MIPS, and RISC-V, a range of out-of-the-box architectures and can be easily configured for others.
“TrustInSoft Analyzer’s unique feature set, which now includes TIS Address, differentiates it from any other testing software by allowing the user to accurately emulate architectures with total control over address and pointer formats. What this means to C/C++ SW developers, embedded software developers, and product security experts is that TrustInSoft Analyzer enables them to verify low-level software like drivers, firmware, bootloaders and operating systems that rely on specific hardware behaviors,” said Fabrice Derepas, founder and CEO of TrustInSoft.
“The benefits of TrustInSoft Analyzer help to eliminate the bottleneck typically caused by limited access to a hardware platform and enables developers to clean their code much earlier in the process, resulting in significant cost reductions. Its unique target awareness capability enables software developers to accurately emulate and test their target, therefore eliminating the need to access and test the real targets.”
Read ATTI‘s interview with Derepas in which he discusses how the company’s analysis technology addresses today’s automotive software development quandaries.