[Nut-upsdev] Static code analysis (was: SSL test regression)

[Arjen de Korte]

Citeren Arnaud Quette <aquette.dev op gmail.com>:

> just to revive the static code analysis thread...
>
> It would be nice if you could expose your ideas and the results of your
> tests.
> Also, apart from Splint, have you tested any other systems?
> From what I see, Splint and Frama-C are probably the most interesting.

Well, the situation hasn't changed much. Even with the latest splint I  
have tried (3.1.2), you still need a *load* of markup to get useful  
output. I'm not sure if this is worth the effort, as you'll have to  
carefully consider each time if the offending line of code should be  
ignored (by adding a directive) or needs changing. Most annoying  
problem is that sometimes even system header files (!) require markup  
and I really don't want to go that route...

Best regards, Arjen
-- 
Please keep list traffic on the list (off-list replies will be rejected)