5 ms·
Actually just realized these were for-real bugs, not just sanitizer testing. Got to say I've never found much value in sanitizer-type products. Signal-to-noise
by HarHarVeryFunny 4y ago
Actually just realized these were for-real bugs, not just sanitizer testing.
Got to say I've never found much value in sanitizer-type products. Signal-to-noise ratio too small, and frankly it's easier just to write stuff with a bit more care in the first place than have to go looking for bugs. Same goes for debuggers - good for post-mortem analysis of core dumps, but IMO not the most productive tool to track down bugs.
Best debugging tool when needed is a few well placed print statements or assert() calls.... Or just a few decades of experience and not creating bugs in the first place!
- gpderetta 4y agoAre you confusing the sanitizers with static analyzers? Sanitizers have little to no false positives. Occasionally they might flag benign errors, but errors nevertheless. You can think of them as adding assertions for you.
- HarHarVeryFunny 4y agoYou're right - was referring to things like Fortify.