News for hackers. Stuff that matters.
Re:A New Development for Coverity and Heartbleed by LVB on Saturday April 12, 2014 @02:33PM (#7578685)
Visual Studio now ships with a reasonably good static analyzer built in. We're using it more than our aging copy of PC-Lint.

(Carmack's review: http://www.altdevblogaday.com/2011/12/24/static-code-analysi...)

Re:A New Development for Coverity and Heartbleed by ygra on Sunday April 13, 2014 @04:23PM (#7582834)
Can you tell VS by now to ignore warnings in 3rd-party libs? Everything that's in Qt's headers is pretty much out of my control but those were by far the most common warnings (or at least I didn't see many real warnings amidst them). At least that's how it's in VS 2010 and it kept me from turning code analysis on more often.
Re:A New Development for Coverity and Heartbleed by TwoBit on Saturday April 12, 2014 @05:07PM (#7579208)
VC++ analysis is useful aside from the fact that it mistakenly thinks every pointer usage is a potential null pointer, but I've gotten better results with clang static analysis.
Re:A New Development for Coverity and Heartbleed by marshray on Saturday April 12, 2014 @09:31PM (#7579821)
Every pointer is potentially null, until proven otherwise (which in the general case means solving the halting problem).