Coverity

来源:
2020-06-01
590

FireShot Capture 015 - Coverity Scan - Static Analysis - scan.coverity.com.png

Goal: Catch bugs in C, C++, Java, and C# code during development

    Commercial spinoff of Stanford static analysis tools

    Analysis is neither sound nor complete; emphasis is on finding bugs that are easy to explain to the user:

    "Explaining errors is often more difficult than finding them. A misunderstood explanation means the error is ignored or, worse, transmuted into a false positive."

    Used by over 1100 companies!

    Very interesting CACM article on challenges of commercializing a research tool A Few Billion Lines of Code Later: Using Static Analysis to Find Bugs in the Real World.



收藏
点赞
2000