Arnaud Quette
2011-Mar-22 10:34 UTC
[Nut-upsdev] Static code analysis (was: SSL test regression)
Hi Arjen, just to revive the static code analysis thread... It would be nice if you could expose your ideas and the results of your tests. Also, apart from Splint, have you tested any other systems?
Arjen de Korte
2011-Mar-31 19:44 UTC
[Nut-upsdev] Static code analysis (was: SSL test regression)
Citeren Arnaud Quette <aquette.dev op gmail.com>:> just to revive the static code analysis thread... > > It would be nice if you could expose your ideas and the results of your > tests. > Also, apart from Splint, have you tested any other systems? > From what I see, Splint and Frama-C are probably the most interesting.Well, the situation hasn't changed much. Even with the latest splint I have tried (3.1.2), you still need a *load* of markup to get useful output. I'm not sure if this is worth the effort, as you'll have to carefully consider each time if the offending line of code should be ignored (by adding a directive) or needs changing. Most annoying problem is that sometimes even system header files (!) require markup and I really don't want to go that route... Best regards, Arjen -- Please keep list traffic on the list (off-list replies will be rejected)