2026-07-07 22:28 UTC
@JdeBP@mastodonapp.uk @bytebro@mastodonapp.uk
Address Sanitizer is implemented in GCC too.
purify was more like Coverity.
And Clang Static Analyzer (https://clang-analyzer.llvm.org/) And now GCC analyzer (https://gcc.gnu.org/onlinedocs/gcc-16.1.0/gcc/Static-Analyzer-Options.html)
Are FOSS versions of static code analyzers.
GCC's version is just starting up a few years ago and still has long way to go for decent support. It does work for C code. C++ code support is being worked on this year with a GSOC project and that seems to progressing really well (meaning patches are going on).
I don't know the state of clang's and from what I have seen it stalled.
Replies (1)
-
@bytebro@mastodonapp.uk 2026-07-07 22:31
@pinskia@hachyderm.io @JdeBP@mastodonapp.uk This is all new to me, so thank you. I'll do some research. But option (a) is always going to be 'get a bored colleague to look at the code' because they'll usually spot whatever it is almost instantly!