I made sure to make the packets in Tox as easy to parse as possible which greatly lowers the chances of fatal packet parsing bugs being present. As for the mai

I made sure to make the packets in Tox as easy to parse as possible which greatly lowers the chances of fatal packet parsing bugs being present. As for the main tool I use to find bugs, it's asan (the clang address sanitizer) which is much more useful than static analysis for finding actual bugs. Of course the main thing I do to try to prevent bugs is reread the code again and again which is what catches pretty much everything. It's open source so anyone can run their favourite tool on it,