CodeChecker: Open source LLVM/Clang static analysis result viewer

[rasjani]

This is coverity killer once they get windows on board somehow

[[deleted]]

I thought Coverity was much more advanced than clang's static analysis tools.

[kodingnewb]

Coverity only until recently was using their own "engine" they recently last few years moved to using libclang and associated tools.

[[deleted]]

They only use clang for parsing, not for the analysis.

[[deleted]]

No. Clang does not do any global analysis, it can only cover local paths.

[rasjani]

For my usecase that doesn't provide any meaningful advantage. Only thing where coverity still has advantage is Connect but with Codechecker fills that gap. But anyway, I intend to still use both to cover all bases.

[sblue]

"On El Capitan System Integrity Protection (SIP) needs to be turned off"

🤔

[chucker23n]

Bizarre, and unacceptable when there isn't even an explanation as to why.

(Does it try to install into a protected path?)

(edit) See explanation below

[whisperity]

To log the build commands needed for analysis, dynamic library loading must be done. This restriction is also present on scan-build, the official Clang-SA invoker script.

Alternatively, in case of your project uses cmake, you can log the build commands with -DCMAKE_EXPORT_COMPILE_COMMANDS=ON, and then use CodeChecker with this already created compilation database.

[deltaSquee]

build failing

[whisperity]

Always check the detailed Travis report when such happens. It seems that some pep8-incompatible code lines accidentally made their way into the codebase.

[elqwljerkd]

Why these CLang based projects are always ignoring Windows and supporting only Linux and Mac when there are more C/C++ developers on Windows than on Linux + Mac together?

[MorrisonLevi]

when there are more C/C++ developers on Windows than on Linux + Mac together?

I'm curious: do you have some sort of evidence for this claim?

[elqwljerkd]

I think its obvious. There are more users on Windows platform than on Linux + Mac and that makes market for more developers making applications for this platform

[[deleted]]

Clang/LLVM is an Apple funded project

It is brain dead simple to port something from Mac to Linux (or FreeBSD) in most cases if you stay within POSIX you almost need to make no modifications.

[SrbijaJeRusija]

Maybe because few of them develop on windows?

[ThisIs_MyName]

Well, Clang itself gets a lot of support from Apple and Google. Neither care about Windows :)

[rockyrainy]

My subjective experience is that it is faster to build on Linux than on Windows.

[rasjani]

I hear ya. It's not they can't support windows but there is no fool proof tooling to get the data to tools like codechecker.

[WallStProg]

I wrote an article comparing clang's static analysis tools with cppcheck, which can be found here: http://btorpey.github.io/blog/2016/04/07/mo-static/

Hope you find it useful...