Open Source C QA Automation Software

ebizzy is designed to generate a workload resembling common web application server workloads. It is highly threaded, has a large in-memory working set, and allocates and deallocates memory frequently.

Flawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.

netstress is a client/server utility designed to stress & benchmark network activity of a given ethernet device or path using simulated (random) real world data and packet sizes instead of fixed data and packet sizes.

Cinemagoer is a Python package useful to retrieve and manage the data of the IMDb movie database about movies, people, characters and companies. Platform-independent, it can retrieve data from both the IMDb's web server and a local copy of the whole db.

SLOCCount is an easy-to-use tool that counts Source Lines of Code (SLOC). It auto-determines the language(s) (inc. C, C++, Ada, Assembly, shell, COBOL, C#, Fortran, Haskell, Java, LISP/Scheme, Perl, PHP, Python, Ruby, SQL). It also estimates cost & time.

CCCC is a tool which analyzes C++ and Java files and generates a report on various metrics of the code. Metrics supported include lines of code, McCabe's complexity and metrics proposed by Chidamber&Kemerer and Henry&Kafura.

Robust, Lightweight, Cross-platform, Template Software. STLSoft is a collection of STL and standard library extensions, and facades over operating-system and 3rd-party APIs.

The Compartmented Robust Posix C++ Unit Test system. crpcut is a simple to use unit test system for C++, where each test case is run in its own process and own working directory, to ensure that each test case starts from a clean slate.

ansvif, or A Not So Very Intelligent Fuzzer, suited to find bugs in code by throwing garbage arguments, files, and environment variables at the target program, that you may or may not have the source code to. It supports many features, such as buffer size, randomization of the buffer size, random data injection, templates, and much more. The purpose of this project is to identify bugs in software, specifically bugs that can induce a segmentation fault under various conditions. This aids security researchers in writing buffer overflows, input validation vulnerabilities, as well as helping one audit code for general logic mistakes.

This framework supports a wide variety of model-based GUI testing techniques. The innovation lies in the architecture of GUITAR, which uses plug-ins to support flexibility and extensibility. Software developers and quality assurance engineers may use this architecture to create new toolchains, new workflows based on the toolchains, and plug in a variety of measurement tools to conduct GUI testing. More detail is presented in this publication: GUITAR: An Innovative Tool for Automated Testing of GUI-driven Software. Bao N. Nguyen, Bryan Robbins, Ishan Banerjee, and Atif Memon. Automated Software Engineering Journal. p.21, 1. 2014

Open System Testing Architecture - a distributed software testing architecture designed around CORBA. The current toolset has the capability of performing scripted Web (HTTP and HTTPS) heavy load tests with performance measurements from Win32 platforms.

Tool for performance testing. Enable investigation of power management issues.

Utility to dump undecorated C++ symbols from C/C++ libraries in a sorted fashion. Useful for testing new library versions for backwards ABI compatibility, among other things. Requires a valid install of VS.Net 2003 or VS 2005, and the .NET 2.0 framework.

AceUnit (Advanced C and Embedded Unit): a comfortable C code unit test framework. AceUnit is JUnit 4.x style, easy, modular and flexible. AceUnit can be used in resource constraint environments, e.g. embedded software development.

A Perl-based benchmarking and load testing suite, with backend written in C. Based on apachebench, but extended with much more functionality. Currently released on CPAN as HTTPD::Bench::ApacheBench.

Automatic correction of software bugs announced in compilers (clang, gcc) / Static Code Analysis tools (cppcheck, FindBugs) and grammar/style errors like in LanguageTool. Usage: use tool (e.g. cppcheck) and store results in a text file. Afterwards call: autoreplacerplus mytextfile

Parsing, interpreting, checking and profiling C application (ISO/IEC 9899:1999 (E))

CQSAT is a powerful, comprehensive and extensible framework for static analysis of program source code and detection of software defects.

CUMock or CMock is a mock framework for interaction based unit testing, inspired by JMock. Good for Test Driven Development (TDD) in the C language. Extends CUnit or any other framework with adapters. Self describing.

Automation of Unit and System Tests. Tests can be implemented in any language and on many platforms. The flexible approach enables the inclusion of many types of tests, such as memory leak checks (using valgrind), coding rule checks, complexity checks, etc. Tests are run by a simple call to hwut in a base directory of a project. In particular for C, HWUT supports make file generation using 'sos' and 'sols' modes. Remote control-able function stubs may be generated using the 'stub' mode. Test cases can be generated using the 'gen' mode, and state machine walkers by the 'sm_walker' mode. Over the last decade HWUT has matured towards a full fledged unit test tool for a wide variety of applications.

Code Distance Visualizer is a static program analyzer. It learns patterns in user defined faulty and correct code instances and using visualization indicates which fragments in a program’s source code are the most similar to these instances.

Columbo reads source code in different languages like COBOL, JCL, CMD and transposes it to graphical views, measures and semantically equivalent texts based on xml. It also investigates into technical bugs.

EDoC++ is both a lint-like tool and a documentation tool that specialises in analysing and documenting the use of exceptions in C++ code.

A simple and incredibly powerful tool for scripting and fuzzing arbitrary network protocols written using the Chicken Scheme-to-C compiler.

An Extensible memory leakage detection system which can be turn on/off just including or not a C header