4 ms·
I'd love to see a comparison of Coverity vs. Clang sanitizers. I wish we could buy just a couple Coverity licenses, but they want to license the entire organiz
by TwoBit 11y ago
I'd love to see a comparison of Coverity vs. Clang sanitizers.
I wish we could buy just a couple Coverity licenses, but they want to license the entire organization for something like $200,000.
- jschwartzi 11y agoJust out of curiosity, how big is your org? I've been tempted to suggest Coverity a few times but I always balk at buying tools where the price is listed as $CallSalesAndNegotiate.
- slacka 11y agoWhen Daniel Hax ran Coverity and Clang against the curl source code, he found that the each "tool detected several issues the other didn’t spot." Coverity – very accurate reports and few false positives clang-analyzer – awesome reports, missed slightly too many issues and reported slightly too many false positives [1] You'll find similar results in PVS Studio vs clang[2] and PVS Studio vs Coverity.[3] If code quality is important to your organization, than one tool is probably not enough. If it's vital, you may want to consider another language such as Haskell or OCaml. [1] http://daniel.haxx.se/blog/2012/07/12/three-static-code-analyzers-compared/ http://daniel.haxx.se/blog/2012/07/12/three-static-code-anal... [2] http://www.viva64.com/en/b/0272/ http://www.viva64.com/en/b/0272/ [3] http://www.viva64.com/en/a/0076/ http://www.viva64.com/en/a/0076/