On So, 2008-09-07 at 18:10 +0000, Jason Spiro wrote:
Other people may be able to suggest more good tools.
AFAIK "splint" is one of the most popular OSS static analysis tools, but I've never really used it. Has anyone here used it? On the flawfinder homepage, it says that splint does deeper analysis than flawfinder. It says it "...works somewhat like lint,
Use grep / read the source: dnl Check for lint AC_CHECK_PROGS(LINT, lclint lint) ...
But I think, thats unused for years... (and it does not work for splint)