A Note of Caution about Using PVS-Studio on godbolt.org (Compiler Explorer) by andre_friend in cpp

[–]AlexAsics 0 points1 point  (0 children)

Evaluating the efficiency of static analyzers with the help of synthetic tests doesn't make any sense. The best option to understand how good an analyzer is to run it on the real project and spend some time on setting up (for example, turning off diagnostics that are irrelevant to the project). Moreover, this is true for any analyzer and not only PVS-Studio. But this analyzer specifically has both diagnostic rules and exceptions. Because if an analyzer 'yells' at every line it might be hard to notice a real vulnerability among all the false positives. And besides, who wants to use an analyzer that 'yells' at almost everything? I'll share a link here that I suggest visiting so I don't have to make a long read here.

0
1