Doesn't seem completely useless: freshbsd.org/search?q=CID%5
This Tweet was deleted by the Tweet author. Learn more
Conversation
This Tweet was deleted by the Tweet author. Learn more
I respect Daniel (not _just_ because we have first names in common :P), but I've heard that argument made elsewhere and I got the understand that it was on the basis of Coverty not being worth setting up - not necessarily that it's worth tearing down if it's already working?
1
This Tweet was deleted by the Tweet author. Learn more
FreeBSD does care about code quality, though - everything from style upwards gets brought up regularily.
This Tweet was deleted by the Tweet author. Learn more
As far as I know we ran Coverity on Gecko way back in the day and it didn’t really do anything to address the flood of security problems.
1
I think a distinction needs to be made between claims. I agree it's implausible that static analysis can find/fix any significant portion of flaws in C code with fundamentally bad object lifetime and ownership policy. OTOH...
1
This Tweet was deleted by the Tweet author. Learn more
I already wrote a thread explaining what I mean, which you know:
twitter.com/DanielMicay/st
Deliberating going out of the way to misrepresent my statements and then pretending I didn't clearly explain my thoughts on this is dishonest.
Quote Tweet
Replying to @vyodaiken @billhuey and 5 others
I haven't made any statements that resemble "it seems plausible to me". You keep taking the approach of attacking me and misrepresenting what I've been saying.
The statements I made about static analysis and self-explanatory. It works better when code has stronger guarantees.
Quote Tweet
Replying to @DanielMicay @vyodaiken and 6 others
In C, there are not many guarantees that *enforced* at compile-time. Static analysis works much better when it can build on lots of guarantees including about pointer aliasing. It can't work as well with something like references in Java vs. Rust where they are very constrained.
1
Quote Tweet
Replying to @DanielMicay @vyodaiken and 6 others
Type systems themselves can be used to enforce many guarantees. That's a much more rigorous form of static analysis compared to heuristic-based checks. Rust's type system statically guarantees things like methods requiring an open file not ever being called on a closed file.
1
Show replies