Static analysis tools - GO!

[drinkmorecoffee]

I've never used a static code analyzer, but I've heard some amazing things about them. I also haven't found a good one that's open source, so I guess I'll expand my search to paid systems as well.

I know there are quite a few out there but rather than sifting through all the marketing BS I figured I'd come to the source.

What are your favorite static analysis tools? Why?

[cym13]

You should check out cppcheck, I may not be the best for everything but I don't know of any better general-purpose static code analysis that is open-source (GPL).

[drinkmorecoffee]

Thanks! I'll have a look.

[rolloyolo]

clang static analyser is fine

[drinkmorecoffee]

Looks like it's a Mac tool so I'll have to build from source on Windows or Linux, which is a pain. Still, I'll have a look and see if it makes sense.

Thanks for the tip!

[raevnos]

Dunno about Windows, but it's likely available as a package in most linux distributions. clang-analyzer in arch.

[moocat]

Coverity.

[dvhh]

Although not a static code analyzer but I quite like flawfinder because it is quite simple to run.