3

RATS is a C, C++, Perl, PHP and Python source code analyzer by Fortify.

The link used to be a fortify.com address. However, now it redirects to hp.com, and the webmaster broke the link. And searching HP results in lots of irrelevant hits, like articles about mice and rats. (Webmasters should lose money for each link they break).

Is RATS still freely available? Or has Fortify replaced it with another free tool? If its available, could someone provide a link? If not, then what's a good alternative?

3
  • 1
    I've edited the question to try and make it more relevant. People would also be able to help you find alternatives easier if you add a list of features that you require in a code analyzer.
    – Tymric
    Oct 22, 2014 at 18:40
  • Most people don't know RATS. Please explain all features you want. Thanks!
    – Nicolas Raoul
    Mar 17, 2015 at 7:53
  • 1
    This appears to be a link to the source code: rough-auditing-tool-for-security.googlecode.com/files/… I have no experience with RATS or this link.
    – Ira Baxter
    Jun 23, 2015 at 8:33

2 Answers 2

2

As Ira Baxter pointed out in the comments, the source for RATS is still available at https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads

A binary for Windows 32bit is available at the URL above.

The source code has received no maintenance since 2014, and now that Google Code is read-only the place to watch might be https://github.com/andrew-d/rough-auditing-tool-for-security (none of the forks are active though)

0

Flawfinder, RATS and Cppcheck are good security static analysis tools for C/C++. they are used to pick out vulnerabilities in source code without actually running the code.

This makes them more portable, but also creates a lot of false positives when looking for actual vulnerabilities in code. They are used more for screening potential vulnerabilities than definitively identifying them.

There is now a GitHub page for RATS that has the source code and lists installation instructions.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.