4 ms·
Isn't that missing a linter? Pretty sure any null-safety linter in Java could pick this up.
by mlinhares 3y ago
Isn't that missing a linter?
Pretty sure any null-safety linter in Java could pick this up.
- vitiral 3y agoThe idea that we just need more piles of tools to fix the problems caused by our shiny new pile of tools is, I think, very demonstrative of how it's all going to come crashing down.
- web3-is-a-scam 3y agoLinters/static analysis should be in “the pile” regardless if you’re using LLM-generated code or not.
- nostrademons 3y agoNo, the NPE was implicit in the Android frameworks, not in user code. Basically it called a method that can be called only after onCreate() completes, from a method that was itself called from onCreate().
- web3-is-a-scam 3y agoThis seems like something that static analysis that is android aware should be able to find?
- nostrademons 3y agoOne of the notes in the postmortem was that if it were Kotlin, it would've been caught by the nullability checker. It wasn't, though, and much of the core Android code won't compile with nullability checks because it was written before @Nullable/@NotNull annotations were a thing. Pre-2010 Java code basically has to assume everything is nullable. My point is that LLM-generated code often doesn't, because it's trained on StackOverflow code where the author either doesn't care or had implicit knowledge about which variables could be null and which couldn't. Hence it generates code that is valid in most situations but can lead to a crash when used in situations where its data dependencies may be null or uninitialized. Exactly the stuff of security nightmares.
- mlinhares 3y agoOr, put in another way, a job guarantee program LOL.