3 ms·
> The Core Guidelines analyzers do not try to accept all valid C++ programs I'm aware. My point is: Are the Core Guidelines enough to completely rule out memor
by catnaroek 10y ago
> The Core Guidelines analyzers do not try to accept all valid C++ programs
I'm aware. My point is: Are the Core Guidelines enough to completely rule out memory errors? This is essentially a type safety claim, and thus requires (possibly informal) proof.
- coldtea 10y ago>Are the Core Guidelines enough to completely rule out memory errors? Does it matter? As long as they rule out the vast majority of memory errors, e.g. many times more than static analysis tools find today.
- catnaroek 10y agoStatic analysis tools for C and C++ have a horrible track record at this. I wouldn't use them as benchmark.
- the_why_of_y 10y agoMy experience is the same: static analysis tools like Coverity, PVS-Studio, etc. find just a small fraction of memory safety errors, mostly the ones that can be found by just looking at a single function with not overly complex control flow.