Re:Hardening the C++ Standard Library at scale
by einpoklum on Saturday November 29, 2025 @03:29PM
(#46090489)
> Static analysis of C++ cannot catch all cases
You're ignoring how static analysis can be made to err on the side of safety rather than promiscuity.
Specifically, for optional dereferencing, static analysis can be made to disallow it unless it can prove the safety.
I beg to differ. Humans are fallible. Static analysis of C++ cannot catch all cases and humans will often accept a change that passes the analyses.