Presenter
Zoltán Porkoláb
Eötvös Loránd University, Faculty of Informatics
Authors
Zoltán Porkoláb
Abstract
Static analysis is a method that allows us to examine source code without running it. Its scope of application is wide: it ranges from code understanding to software vulnerability discovery. Its great advantage is that it provides early feedback in modern CI pipelines, and we know that the sooner we fix a bug, the lower its cost.
Static analysis is a popular topic in the academic world. But how does it perform in practice, in a real industrial environment?
In my talk, I will report on the experiences we have gained from the CodeChecker infrastructure, jointly developed by Ericsson and Eötvös Loránd University, over the past nearly 10 years. CodeChecker is a framework that controls the execution of several static analyzers and provides their results to developers in a unified way. It is used by Apple, Google, Sony, BMW, and many others. The paid version of GitLab provides this as a built-in static analysis service.
Slides
TBA