ISO 26262 Compliance for Automotive C/C++ with CppDepend
How CppDepend helps automotive teams meet ISO 26262 objectives: static analysis, MISRA compliance, architecture control, ASIL-ready evidence and audit reports.
ISO 26262 is the international functional-safety standard for electrical and electronic systems in road vehicles. It defines the safety lifecycle — from concept to decommissioning — and classifies software under Automotive Safety Integrity Levels (ASIL A to D). For software units written in C and C++, the standard explicitly recommends static code analysis, coding guidelines (MISRA), and controlled software architectures.
What ISO 26262 Expects From Your C/C++ Codebase
Coding guidelines enforcement: ISO 26262 Part 6 recommends MISRA C/C++ for language-subset control — with higher ASILs requiring proof of systematic enforcement.
Static analysis: defects, dead code, uninitialized variables and complexity must be detected by tool-based analysis, not manual reviews alone.
Architectural constraints: freedom from interference between software components — partitioning and controlled interfaces.
Traceability & evidence: every requirement needs verifiable, repeatable proof that auditors can review.
How CppDepend Supports ISO 26262 Workflows
Built-in MISRA C/C++ rule sets with severity mapping, baseline management and suppressions with justification — the coding-standard pillar of Part 6.
Custom CQLinq rules to encode your project-specific safety rules: forbidden functions, recursion bans, dynamic-memory restrictions, naming and layering conventions.
Architecture validation: enforce component partitioning and detect forbidden couplings between ASIL-rated and QM code before they reach the vehicle.
Technical debt & quality gates: block unsafe code at CI time with thresholds on violations, complexity and coverage.
Built-in vs. custom standards. CppDepend ships built-in rule sets for MISRA C/MISRA C++, CWE, CERT C/CERT C++ and AUTOSAR C++14. Functional-safety and industry standards like this one are enforced through custom CQLinq rules, architecture validation and quality gates defined by your team.