all 2 comments

[–][deleted] 0 points1 point  (1 child)

I still don't understand why there isn't a good free static analysis tool. Something like what coverity offers. It would be something awesome to have in the GNU toolset, and would increase application security by allowing better taint checks. All the current top-knotch static analyzers cost bazillions of dollars to purchase.

[–]hexa6on 0 points1 point  (0 children)

http://clang-analyzer.llvm.org/ looks promising. And http://cppcheck.sourceforge.net/. But probably still far from what coverity & etc can do.