eremeevp

3 ms·

1. 1.▲
   by eremeevp 10y ago

   I would say, that in this case, with the 50\50 false positive ratio, it is quite manageable, i.e. for every 2 analyzer messages, there is 1 interesting issue in the source code.
2. 2.▲
   by eremeevp 10y ago

   I think the message is "regardless of what techniques, tools and analyzers you are using right now, more errors can still be found by applying just another tool".
3. 3.▲
   by eremeevp 10y ago

   You can't protect everything, but I'm sure they have a secure browser at NSA )
4. 4.▲
   by eremeevp 10y ago

   >That said, NASA/JPL publish code standards, although I imagine most tech companies would balk at giving up their toys and hot languages/frameworks to do fairly tedious work like this. For most companies developing non-critical
5. 5.▲
   by eremeevp 10y ago

   The automation code will still contain much of the same errors. Besides, all modern IDE's provide multiple options for testing and refactoring (code corrections), but apparently this is not enough. At least this proves static analysis
6. 6.▲
   by eremeevp 14y ago

   Thanks for your feedback!