An analysis of ordnance software using the MALPAS tools

Results of using the MALPAS static analysis package are presented, both as they relate to the specific software being analyzed and more generally in terms of the experience and insight gained into the application of static analysis techniques to the verification of real-time software. The translation of the software into the intermediate language used by the MALPAS analyzers, the results of code analysis, the answers to questions posed about the software, and the conclusions arising from the analysis are discussed. Two significant safety-related flaws were detected during the analysis, one in the software itself and the other in the specification of the device. Comparisons are made between the findings of the analysis and currently proposed standards for writing safety-critical software.<>