3 ms·
Most of those tools check runtime properties of your code. If your test suite is perfect, that gets you quite far. I don't know of many nontrivial projects with
by adrianN 4y ago
Most of those tools check runtime properties of your code. If your test suite is perfect, that gets you quite far. I don't know of many nontrivial projects with perfect test suites.
- tsimionescu 4y agoWithout a good test suite, there are often security issues that don't depend on memory safety violations. Also, I did mention a static analyzer among the tools, which will likely be able to do analysis quite similar to the Rust borrow-checker (but with an order of magnitude more false positives, which the OP claims they are fixing anyway).
- gavinhoward 4y agoAuthor here. Not a perfect test suite, but the one for my bc [1] is pretty good. [1]: https://git.gavinhoward.com/gavin/bc https://git.gavinhoward.com/gavin/bc