Safety-Critical Tool Submission: TrustInSoft Rust Static Analysis

[PLeVasseur]

What is the name of the tool?

TrustInSoft Analyzer

What is a description of the tool, what it does, how it would be used?

Static analysis for C, C++, and soon to be Rust code
(Not yet currently publicly available for Rust, planned for next release in October)

Link to the tool repo or homepage

https://www.trust-in-soft.com/trustinsoft-analyzer

What is your role/connection to this tool?

Other

Tool category

static-analysis

[scrabsha]

(on holiday, will reply on Monday)

[scrabsha]

Hi!

There are two different things: TrustInSoft Rust Code Analysis Services and TrustInSoft Analyzer.

TrustInSoft Analyzer is a static analyzer that supports C and C++, and will support Rust (in the next public release, in October). On the Rust side, it aims to find all the potential panics, integer overflows and UBs in a codebase. It also handles FFI just fine (which AFAIK no other static analyzer does at the moment). We may consider adding checks for some safety critical coding guidelines, but this is not planned for the first release.

TrustInSoft Rust Code Analysis Services is a "send us your Rust code and we find bad things in it" service. Internally, our analysts use a development version of our TrustInSoft Analyzer with Rust support enabled. We already found a bunch of nontrivial issues in industrial code that could not reasonably be caught with regular testing.

AIUI, this issue is about TrustInSoft Rust Code Analysis Services. In all fairness, I am not sure we want to add it to the list of tools, given that it... not a tool. I may have missed some discussions, though: did we end up allowing services here?

I'd love to add TrustInSoft Analyzer entry in the Safety-Critical Tool list, but it felt wrong to add a tool that is not publicly available yet. I don't mind doing the submission ahead of time, so that the tool is properly listed on the day TrustInSoft Analyzer with Rust support is released, though :)

[PLeVasseur]

I'd love to add TrustInSoft Analyzer entry in the Safety-Critical Tool list, but it felt wrong to add a tool that is not publicly available yet. I don't mind doing the submission ahead of time, so that the tool is properly listed on the day TrustInSoft Analyzer with Rust support is released, though :)

Ah yep, the intent was to have the TrustInSoft Analyzer be on the list. I'll modify the entry on the issue to reflect that 👍
Thanks for clarifying ☺️

[PLeVasseur]

Okay, I've updated the entry. Does it make sense now?

[scrabsha]

It's all good, thanks :)

Also, I think it makes sense that I maintain this entry in the future. Is there any problem with that?

[PLeVasseur]

Not a problem at all ☺️
I was encouraging us to "get started" in writing up entries, but you maintaining it makes a lot of sense 👍