IAR C-STAT

Part of IAR Platform

IAR C-STAT is a static analysis tool that analyzes your source code to find errors and vulnerabilities.

Try Interactive Demo Request Pricing

Key Benefits

IAR C-STAT enhances code quality and compliance with powerful features for efficient analysis, reporting, and automation.

Coding Assistance
Detailed and Insightful Reports
Safety Compliance
Automation-Friendly

Coding Assistance

Even if identified issues are known, C-STAT provides detailed documentation explaining potential problems like memory leaks and crashes. Each check includes descriptions and code examples showing both failing and passing cases to support better coding decisions.

Detailed and Insightful Reports

C-STAT not only reports rule deviations but also assesses severity and confidence levels. Not all flagged issues indicate real problems, helping developers prioritize fixes effectively and avoid unnecessary changes to well-functioning code.

Safety Compliance

C-STAT supports compliance with MISRA C, CWE, CERT C/C++, selected SANS Top 25 checks, OWASP, and MISRA C++. TÜV SÜD-certified versions are available in selected IAR Embedded Workbench functional safety editions, providing industry-required verification for safety-critical applications.

Automation-Friendly

C-STAT integrates into CI systems and automated build workflows, making static analysis a seamless, recurring process. Regular automated checks enhance code quality while maintaining development efficiency, ensuring early detection of potential issues in the pipeline.

Integrated in IAR Embedded Workbench

C-STAT is built into IAR Embedded Workbench IDE and IAR Build Tools, enabling static analysis within the development environment. SARIF diagnostics enhance reporting, integration, and structured issue tracking for quality assurance.

Command-Line support

Use C-STAT from the command line for CMake-based projects and CI/CD automation. It integrates into automated pipelines without complex setup, enabling continuous static analysis in modern development workflows.

Regression Testing

Works with IAR Command Line Build Utility (iarbuild.exe) for automated regression testing. Detects deviations early, reduces debugging effort, and ensures continuous code quality verification for compliance.

Comprehensive Code Analysis

Performs source code checks for coding rule deviations in C/C++ files and link-time checks for global and static object usage. Supports MISRA C, MISRA C++, CERT C/C++, CWE, and other standards to improve code quality and security.

TRY OUT IAR'S PLATFORM

Interactive Demo

Experience IAR's platform and get an introduction to how it works.

Try Interactive Demo

Architecture	Manufacturer	Family	Device
Loading…

Supported Standards

Compliance with Coding Standards

C-STAT supports MISRA C/C++:2023 (Arm, RISC-V, RX and RL78 toolchains), MISRA C:2012, MISRA C++:2008, MISRA C:2004, CERT C/C++, CWE, selected SANS Top 25 checks, and OWASP for compliance and security, ensuring high code quality and adherence to industry standards.

SARIF Diagnostics Support

C-STAT supports SARIF (SARIF (Static Analysis Results Interchange Format), enabling structured issue tracking, seamless toolchain integration, and improved reporting for compliance, security, and development workflows.

FAQ

Which architectures support C-STAT in IAR Embedded Workbench?

Supported versions: IAR Embedded Workbench for ARM, from version 7.40 IAR Embedded Workbench for RISC-V, from version 1.10 IAR Embedded Workbench for MSP430, from version 6.30 IAR Embedded Workbench for AVR32, from version 4.30 IAR Embedded Workbench for AVR, from version 6.60 IAR Embedded Workbench for RX, from version 2.80 IAR Embedded Workbench for V850, from version 4.20 IAR Embedded Workbench for CR16C, from version 3.30 IAR Embedded Workbench for STM8, from version 2.20 IAR Embedded Workbench for 8051, from version 9.30 IAR Embedded Workbench for RL78, from version 2.20 IAR Embedded Workbench for RH850, from version 1.30

Can I analyze C/C++ source files individually?

Yes! While C-STAT can analyze entire projects built with the IAR tools, it is possible to narrow down the analysis scope to a group of source files or even to a single source which, during development, saves time and keeps focus.

What types of coding standards does IAR C-STAT support?

IAR C-STAT helps enforce compliance with MISRA C/C++, CERT C, and CWE, ensuring code quality and security.

How does static analysis with IAR C-STAT improve code reliability?

By detecting potential issues early in development, such as undefined behavior, buffer overflows, and security vulnerabilities, reducing debugging time and risks.

Can IAR C-STAT integrate into CI/CD workflows?

Yes, it supports automation in modern DevOps pipelines with IAR Build Tools for CI/CD, enabling continuous static code analysis.

Get Access to All

Scale development operations with freedom and flexibility, accelerate innovation with code confidence and simplify compliance while strengthening security.

Architecture and device agnostic
Cloud-ready, tailored for enterprises
Functional safety always included
End-to-end embedded security

With our platform, you get access to everything.

Explore the Platform