CppCon 2015: Jason Turner “The Current State of (free) Static Analysis'

preview_player
Показать описание


We will discuss the currently available free static analysis software available for C++. What kinds of errors can these tools catch? What kind do they miss? Why static analysis should be a part of your normal build process.


*-----*
Рекомендации по теме
Комментарии
Автор

Slide 49. I looked at the code for a few minutes thinking everything looked
fine. It wasn't until I typed it out did I remember that 'do' is a
keyword.

SandSnipr
Автор

@13:43 You have a function called "do". That doesn't compile.

dascandy
Автор

cppcheck is a horrible buggy piece of software. I tried to analyze a big C project, and it just ignores some files, analyzes other files that i explicitly said to ignore. The automatic parsing of VS projects does not work, it does not support make projects to find the files belonging to a project, only cmake which sucks. Then clang is really hard to set up on windows, and the MSVC tools are only for VS Projects and in general weak. Maybe commercial tools are better, but in general i could not disagree more on the claim that C-style Issues are solved today.

Seff