3 ms·
it's just sad that Coverity represents the best working C++ static analysis tool.
by MetaverseClub 5mo ago
it's just sad that Coverity represents the best working C++ static analysis tool.
- sfink 5mo agoThe best general purpose one, anyway. Specialty tools can be much better for their niches. Heck, compiler warnings are one such niche tool, and some of them are quite good.
- canucker2016 5mo agoThere's also PVS-Studio. They also scan open source projects - see https://pvs-studio.com/en/blog/inspections/ https://pvs-studio.com/en/blog/inspections/ It's hard to convince managers to spend money on static analysis tools (or any development tool). Unless your company just got bad publicity for a bug and your devs come to you and demonstrate that a certain static analysis tool would have flagged that particular piece of code, most managers would let the beancounter-facet dominate the decision making process.