Goal: Catch bugs in C, C++, Java, and C# code during development
Commercial spinoff of Stanford static analysis tools
Analysis is neither sound nor complete; emphasis is on finding bugs that are easy to explain to the user:
"Explaining errors is often more difficult than finding them. A misunderstood explanation means the error is ignored or, worse, transmuted into a false positive."
Used by over 1100 companies!
Very interesting CACM article on challenges of commercializing a research tool A Few Billion Lines of Code Later: Using Static Analysis to Find Bugs in the Real World.
已完成
数据加载中