2 ms·
Weird that Infer [1] was not included in the evaluation. It supports C/C++ and its underlying reasoning framework (Separation Logic [2]) is exactly geared towar
by lou1306 1y ago
Weird that Infer [1] was not included in the evaluation. It supports C/C++ and its underlying reasoning framework (Separation Logic [2]) is exactly geared towards checking memory safety.
[1] https://fbinfer.com/ https://fbinfer.com/
[2] https://en.wikipedia.org/wiki/Separation_logic https://en.wikipedia.org/wiki/Separation_logic
- UncleMeat 1y agoSanitizers are runtime tools, not static analysis tools. Static analyzers are also virtually never sound as sound tools produce an outrageous number of false positives, especially when languages that so easily permit nonlocal mutation.