Is splint the best for static code checking? I mean free.
- From: "Bin Chen" <binary.chen@xxxxxxxxx>
- Date: 18 Mar 2007 22:13:02 -0700
But I have some doubts, such as following code checked by splint:
binch@binch:/tmp$ splint b.c
Splint 3.1.1 --- 20 Jun 2006
b.c: (in function main)
b.c:6:2: Path with no return in function declared to return int
There is a path through a function declared to return a value on
which there
is no return statement. This means the execution may fall through
without
returning a meaningful result to the caller. (Use -noret to inhibit
warning)
b.c:1:5: Variable exported but not used outside b: b
A declaration is exported, but not used outside this module.
Declaration can
use static qualifier. (Use -exportlocal to inhibit warning)
Finished checking --- 2 code warnings
binch@binch:/tmp$ cat b.c
int b[3];
main()
{
b[8] = 5;
}
It can't figure out the array overflow access. Any other choice to
splint? I need a free one. Thanks.
abai
.
- Follow-Ups:
- Re: Is splint the best for static code checking? I mean free.
- From: Emmanuel Fleury
- Re: Is splint the best for static code checking? I mean free.
- From: Grant Edwards
- Re: Is splint the best for static code checking? I mean free.
- From: Måns Rullgård
- Re: Is splint the best for static code checking? I mean free.
- Prev by Date: Re: How to compile libraries statically from RPMs
- Next by Date: Re: Is splint the best for static code checking? I mean free.
- Previous by thread: How to compile libraries statically from RPMs
- Next by thread: Re: Is splint the best for static code checking? I mean free.
- Index(es):
Relevant Pages
|
