Hacker News new | ask | show | jobs
by derekerdmann 974 days ago
Static analyzers are NOT formal methods. Reporting no issues just means your tool didn’t find anything, not that your program is correct.
2 comments

If a static analyzer is sound, which is something that can be mathematically proven (formal method), will find ALL existing issues plus some false positives if it's not complete (which is almost always the case).
Formal methods do not necessarily prove the absence of bugs either.
> Formal methods do not necessarily prove the absence of bugs either.

They can demonstrate the bugs, when found, are in the specifications

Or in the methods....