3 ms·
> Eliminating C programming bugs does not necessarily require switching programming languages. Other approaches to reducing bug rates in software include: > -
by OnlyOneCannolo 6y ago
> Eliminating C programming bugs does not necessarily require switching programming languages. Other approaches to reducing bug rates in software include:
> - Static checkers that scan source code for bugs.
Does QEMU use a sound static analyzer (like IKOS [1])?
[1] https://github.com/NASA-SW-VnV/ikos https://github.com/NASA-SW-VnV/ikos
- stefanha 6y agoNo. Coverity scans QEMU regularly but it is not sound. The challenge with static analyzers is that false positives make people not want to deal with the analyzer reports. I will check out IKOS, thanks!
- OnlyOneCannolo 6y agoOne of the cool things about that particular analyzer is that you can choose how accurate it is in exchange for how long it takes.