News for hackers. Stuff that matters.
Re:Burying your dead code by msangi on Thursday September 07, 2017 @06:16PM (#15196282)
Static analysis is very useful to identify unreachable code given that it can see all the code depending on it.

It doesn't help with potentially reachable but unused cpdepaths, which in my experience make up for the most of 'dead' code.

Think of the functionality in an application that nobody uses or of obsolete API version when all the clients use a more recent version.

Re:Burying your dead code by lomnakkus on Thursday September 07, 2017 @08:15PM (#15196948)
This is an excellent point, but it should be noted that once you delete the unused API endpoint, finding the rest of the dead code is almost trivial with static analysis.

30-15 to static analysis, I think? ;)