News for hackers. Stuff that matters.
Re:Why Don't Software Developers Use Static Analysis Tools t... by anon1385 on Friday June 26, 2015 @03:58AM (#9782919)
Have you used one of the popular IDEs recently (Visual Studio, Xcode etc)? It's built into most these days.

Everybody I know who actually uses static analysis does so because it's built into their IDE and very easy to use.

Re:Why Don't Software Developers Use Static Analysis Tools t... by AndreyKarpov on Friday June 26, 2015 @04:30AM (#9783004)
Also, I recommend you to try Incremental analysis mode in PVS-Studio. It corrects on its own and doesn't distract programmer. http://www.viva64.com/en/b/0305/#ID0ECLDK
Re:Why Don't Software Developers Use Static Analysis Tools t... by kybernetyk on Friday June 26, 2015 @04:10AM (#9782947)
In Xcode at least there's a 'Build & Analyze" command (cmd-shift-b).

What I like to do is to force a deep analyze on every build. Takes a little longer to build but at least I catch some bugs when I introduce them.

Re:Why Don't Software Developers Use Static Analysis Tools t... by maccard on Friday June 26, 2015 @04:16AM (#9782959)
My compile is already 10 minutes, I don't want to add a static analysis pass to every build thanks.
Re:Why Don't Software Developers Use Static Analysis Tools t... by AndreyKarpov on Friday June 26, 2015 @04:38AM (#9783027)
I would like to put my two cents.

1) PVS-Studio can instead be set to run in background immediately after the edited code has been successfully compiled.

2) PVS-Studio integrates with IncrediBuild. And soon we will publish an article about it. A little spoiler. :)

Re:Why Don't Software Developers Use Static Analysis Tools t... by 72deluxe on Friday June 26, 2015 @04:37AM (#9783024)
Why is your compile 10 minutes? Mine is about 20 seconds for ~82000 lines of C++ (not comments), with 43000 header lines and 7669 lines of C (according to cloc), and that's on a 2008 quad-core Xeon Mac Pro.

Do you not parallel build?

Re:Why Don't Software Developers Use Static Analysis Tools t... by kasey_junk on Friday June 26, 2015 @07:11AM (#9783532)
130K LOC is an extremely small project. 10 minute compile steps are less common than they used to be, but early in my career I would have dreamed for 10 minute compile cycles.
Re:Why Don't Software Developers Use Static Analysis Tools t... by maccard on Friday June 26, 2015 @05:24AM (#9783135)
Parallel build with 40 cores(2x intel xeons), 32GB ram using Visual Studio. According to cloc, we have 11k C++ files. 18k C/c++ header, with 4.5M lines of C++, and 1.5M C/C++ Header, and 700K C. We use a unity build to speed it up (to 10 minutes) without it, it's roughly 40 minutes.
Re:Why Don't Software Developers Use Static Analysis Tools t... by 72deluxe on Sunday June 28, 2015 @01:59PM (#9794359)
Haha my project is tiny, yours is mental haha that's bonkers
Re:Why Don't Software Developers Use Static Analysis Tools t... by Ono-Sendai on Friday June 26, 2015 @05:18AM (#9783118)
He probably has more source code.
Re:Why Don't Software Developers Use Static Analysis Tools t... by andymcsherry on Friday June 26, 2015 @04:21AM (#9782974)
I would wager 10 minutes is far from the norm for most user's builds in X-Code. That being said, analyzing every build seems a bit much.
Re:Why Don't Software Developers Use Static Analysis Tools t... by kybernetyk on Wednesday July 01, 2015 @03:55PM (#9814691)
Analyzing is incremental too. If you only change foo.cpp then only foo.cpp will be analyzed.
Re:Why Don't Software Developers Use Static Analysis Tools t... by kybernetyk on Wednesday July 01, 2015 @03:54PM (#9814681)
Don't do a full build every time then.
Re:Why Don't Software Developers Use Static Analysis Tools t... by verinus on Friday June 26, 2015 @05:52AM (#9783233)
well then run it on CI/daily builds.
Re:Why Don't Software Developers Use Static Analysis Tools t... by maccard on Friday June 26, 2015 @06:05AM (#9783279)
That's fine, but making it a default option for all developers on every build wouldn't be suitable for us is what I was saying. I'm fine if it's run on the CI servers, or even if it's a requirement that I submit a "clean" static analysis report with my changes, which can be done by giving me the option (like XCode/Visual studio already do).