Axivion - Static Code Analysis with Architecture verification

Axivion static code analysis is a high-end tool that stops software erosion, detects code with a high risk of becoming a bug, reduces code complexity, finds 100% dead code, and much more. In addition, Axivion is now part of the QT Group, which strengthens its long-term roadmap and integration ecosystem. Sightsys officially distributes Axivion in Israel, providing local sales, technical support, and training to embedded development teams across the country.

Why Choose Axivion Static Code Analysis

When you maintain large or long-lived codebases, software quality naturally degrades over time. In contrast, Axivion catches problems early, before they reach production. Therefore, your team spends less time firefighting and more time building features.

For example, the defect analysis feature identifies weaknesses in your software project. Similarly, the metrics module generates quantitative information about the internal quality and complexity of your code. Furthermore, the style checks ensure your project achieves compliance with the coding guidelines you choose. As a result, you gain full visibility into both functional and structural quality issues.

Compliance and Coding Standards

Axivion static code analysis ships with predefined compliance checks for the most demanding industry standards, including:

MISRA C and MISRA C++
AUTOSAR C++14
CERT secure coding standards
CWE (Common Weakness Enumeration)
HIS and McCabe metrics

Moreover, you can track memory leaks and dead code automatically. In addition, the Axivion Suite’s rule editor lets you set and check your own custom rules. Therefore, the tool adapts perfectly to your team’s coding policy.

Architecture Verification

In contrast to most static analyzers, Axivion can also verify whether your code actually follows the intended software architecture. Furthermore, if you don’t yet have a defined architecture, the tool helps you build one. As a result, architectural drift becomes visible and manageable, instead of slowly destroying your codebase.

Documentation and Resources

To learn more about Axivion static code analysis, explore the resources below:

Get Axivion Static Code Analysis in Israel

As the local distributor, Sightsys provides full sales and technical support for Axivion throughout Israel. Therefore, you can rely on local expertise from engineers who actually use these tools daily, rather than overseas-only support. For more information, browse our complete range of embedded software testing solutions, or alternatively, contact us for pricing, demos, and consultation tailored to your project.

Support C, C++, C#

Coding Guidlines:

• MISRA C/C++
• AUTOSAR C++14
• SEI CERT® C/C++
• C Secure Coding
• CWE
• Qt-specific rule sets
• Best practice (e.g. CQM)
• Customized checks

The various versions of the MISRA Guidelines for the use of the C and C++ languages in critical systems were and are developed by the MISRA consortium. MISRA stands for Motor Industry Software Reliability Association.

The original focus of the MISRA standards is therefore on the development of safety-relevant and reliable software in the automotive environment and thus within the scope of ISO 26262. Compliance with the MISRA guidelines is regularly required for software development in all industries throughout the embedded sector, especially when it comes to functional safety. By applying the generally accepted MISRA rules, code quality is controlled along the supply chain.

The MISRA checker of the Axivion Suite covers 100% of the automatically testable rules for MISRA C:2004, MISRAC:2012, MISRA C:2019, MISRA C:2023 and MISRA C++:2008 as well as the majority of the rules for MISRA C++:2023.

Defect analysis: By identifying potential defects and coding errors early in the development cycle, Axivion can help minimize the risk of software malfunctions that could lead to patient harm, which is a key tenet of IEC 62304.
Compliance with Coding Standards: Axivion can be configured to check code against industry coding standards relevant to medical device development, such as MISRA C/C++ or CERT Secure Coding. Following these standards can help improve code quality and reduce the likelihood of errors, which aligns with IEC 62304’s emphasis on safe and reliable software.
Improved Maintainability: By identifying code smells and complexities, Axivion can help developers write cleaner and more maintainable code. This can be crucial for medical device software, where long-term maintenance and support are essential. Easier to understand code reduces the risk of introducing errors during modifications, which is a concern for IEC 62304 compliance.

While Axivion might not directly manage document control or workflows, it plays a significant role in ensuring code quality and reducing errors, which indirectly contributes to achieving IEC 62304 compliance.

Architecture verification

• Integrated modeler
• Interfaces to UML tools
• AUTOSAR XML import (ARXML)
• Freedom from Interference
• Architecture reconstruction
• Architecture views for safety and security
Coding guidelines
• MISRA C/C++
• AUTOSAR C++14
• SEI CERT® C/C++
• C Secure Coding
• CWE
• Qt-specific rule sets
• Best practice (e.g. CQM)
• Customized checks

Metrics monitoring

• HIS
• OO Design metrics
• Complexity metrics
• Best practice and customized checks
Dead code analysis
• Reachability analysis
• Analysis of libraries

Clone Detection
• Type I (1:1)
• Type II (Parametrizations)
• Type III (Parametrizations + Add/Delete)

Cycle detection

• Calls
• Module dependencies
• Includes/Imports
• Customized checks

Defect detection

• NULL dereferences
• Escaping addresses of local variables
• Memory leaks from new/malloc without delete/free
• Mismatched resource allocations/releases
• Resources used for reading/writing at the same time
• Forbidden operations on resources
• Double free/use after free
• Comparison/subtraction of unrelated pointers
• Array access out of bounds
• Buffer overflow
• Side effects
• Taint analysis
• Race condition analysis

Exceptions

• Exceptions during stack unwinding
• Violations of exception specifications
• Uncaught exceptions
• Dead catch blocks
Numerical errors
• Divisions by zero
• Overflow in arithmetic computation
• Assignment of bad values to enum-typed variables
Logical errors and customized rules
• Forbidden argument values
• Uninitialized variables
• Unused definitions
• Constant conditions

Results appear on a special dashboard and/Ot on the IDE of the user:

Qt Creator, CLion, EclipseTM, Eclipse-based (e.g. Atollic TrueSTUDIO®, CodeWarrior®, DAVETM, STM32CubeIDE,
TI Code Composer StudioTM), Microsoft® Visual Studio®, Microsoft® Visual Studio Code®, Generic plugins

Axivion Suite is suited for use in the development
of safety systems. Axivion Static Code Analysis
(SCA) is certified by SGS-TÜV Saar GmbH for the
following safety-relevant standards:

• ISO 26262 (up to ASIL-D)
• IEC 61508 (up to SIL 4)
• EN 50128 (up to SIL 4)
• EN 50657 (up to SIL 4)
• IEC 62304 (up to Class C)

As well as DO-178C