On Tue, Dec 17, 2013 at 6:17 PM, Rahul Sundaram <metherid(a)gmail.com> wrote:
Hi
In the last few days, I have been running cppcheck on quite a few programs
including systemd, transmission, libvirt, ndjbdns etc and cppcheck has
found real and potential bugs (null pointer dereferences, uninitialized
variables, memory & resource leaks etc) in each of them. I have reported
the ones I found and several developers have already fixed the issues. A
couple of examples
http://cgit.freedesktop.org/systemd/systemd/commit/?id=e985665d2d226cb42b...
https://github.com/pjps/ndjbdns/commit/ee4112a702e22d447d9cd7bd31b880eacf...
Have you been able to compare cppcheck with clang's static-analyzer?
Both issues that you managed to identify should have been found by
clang as well.
Besides, clang's analyzer can be easily integrated with any build
process, just set CC, CXX to scan-build. It will both, build the code
with your preferred CC and do the analysis producing a nice report
should errors be found.
--
Maciek Borzecki