News for hackers. Stuff that matters.
Re:Static Analysis Tools for C by ChrisRR on Thursday October 26, 2023 @09:11AM (#38025047)
Most of my lint warnings aren't false positives though, they're potential issues. Most of my time sorting through lint warnings is addressing the warnings for potential issues.

The potential for an issue may be legitimate, but that doesn't make it a false positive.

Re:Static Analysis Tools for C by bluGill on Thursday October 26, 2023 @09:17AM (#38025115)
Some lint tools are better than others about it. Potential is not enough - there needs to be a clear fix that shuts up the warning and makes the code function as intended (which may be different than as I wrote it!). The tool I'm thinking of didn't have that, so we regularly silenced warnings, and then a few years of that and the habit became to not even bother looking at what the warning was, just silence it.

If there is a clear fix that makes the code objectively better then I'm for the tool. However if it warns about correct code because of a potential issue that doesn't even apply that is a false positive.