Set up static analysis

Open ghost opened this issue 8 years ago • 2 comments

Coverity Scan and Cppcheck look interesting. There's a nice comparison here. ecec is small, but the combination of crypto, string parsing, and C makes me nervous. 😁

Feb 26 '17 04:02 ghost

This is a handy guide for humans writing C. It doesn't replace static analysis, of course, but I found it informative.

Mar 16 '17 06:03 ghost

I tried DeepCode AI static analyzer on the repo, it has reported 13 issues (3 unique issues, repeated) ->

https://www.deepcode.ai/app/gh/web-push-libs/ecec/9c51ad6b959bc775b6a99018a43803d090ed9f05/_/dashboard

Nov 12 '20 07:11 adi-g15