Re: Is splint the best for static code checking? I mean free.

Måns Rullgård <mans@xxxxxxxxx> writes:

"Bin Chen" <binary.chen@xxxxxxxxx> writes:

int b[3];

main()
{
b[8] = 5;
}

It can't figure out the array overflow access. Any other choice to
splint? I need a free one. Thanks.

I don't think there is any free tool that can do this.

Me neither. For reference, here is Insure++ report:

$ insure gcc -c b.c
[b.c:5] **WRITE_BAD_INDEX**
Writing array out of range: b[8]
b[8] = 5;


Cheers,
--
In order to understand recursion you must first understand recursion.
Remove /-nsp/ for email.
.