3 ms·
I worked for static analysis company. I am happy to see this kind of analyses popping up here and there. As computers become more powerful, you can do more sop
by mynegation 15y ago
I worked for static analysis company.
I am happy to see this kind of analyses popping up here and there. As computers become more powerful, you can do more sophisticated checks.
One of the biggest problems in static analysis is false positives - reports about potential problems which are not relevant for one reason or another, and false positive rate has huge impact on ROI.
Unfortunately, aside from an interface element for triage, article does not mention or link to the article that describes how they are handling false-positives problem in the analysis.
- dexen 15y agoThe article does not mention whether the bugs have been reported and rectified in subsequent releases, either. Since at least some of the bugs found are segfault/data-corruption/wrong-query-results level ones[†], one would assume they'd get found out quite soon. For me, when picking software for a new project, an important metric is how fast bugs get fixed upstream. -- [†] I just love how `ones' is a perfectly reasonable expression in english. `Would that it were so in our programming languages', with apologies to Alan Perlis ;-)