Hacker News new | ask | show | jobs
by b0rsuk 3127 days ago
Correct me if I'm wrong, but you can't be sure if programmers used a static analysis tool ? Maybe they used it just enough to make sure it compiles ? And if all you get is a binary, you can't even run those tools yourself. That's my problem with the argument: "The language has issues, but you can run static analysis tools" and "it takes some self-discipline". If you take over someone's code, you're back to square one.

Rust, on the other hand, could be called Trust. Borrow checker is for everyone.

1 comments

> Correct me if I'm wrong, but you can't be sure if programmers used a static analysis tool?

I could be sure that they used a static analysis tool, for example, if I watched them use it. But that alone is not enough: the static analysis tool has to be sound, and most static analysis tools for C and C++ deliberately aim for less than soundness.