<p>I am looking into static analysis, and I'd like to know what to expect in the case of Bitcoin's main implementation, Bitcoin-Core. </p>

<p>That way, if I try static analysis on <a href="https://github.com/bitcoin/bitcoin" rel="nofollow">Bitcoin</a>, I will know whether I've done it properly (e.g. I get something other than "Yay, everything's fine!" or "Boo, all is broken!").</p>

<p>There doesn't seem to be much out there beyond <code>make check</code> and <a href="https://github.com/bitcoin/bitcoin/issues?utf8=%E2%9C%93&amp;q=is%3Aissue%20is%3Aopen%20%22static%20analysis%22" rel="nofollow">some Github issues</a>. </p>

<p>It could maybe stand some more independent research, but I want to check whether <em>somebody</em> out there knows this <em>already</em> (and is willing to subject themselves to the vagaries of the stackexchange communities enough to answer it). </p>

<p><strong>What are the current known static analysis issues with Bitcoin core, if any?</strong> </p>

CC BY-SA 3.0
2015-09-06T19:00:12.083Z
Please feel free to post a comment if I'm not making this clear enough? Also note that I'm not talking about static analysis of Bitcoin opcodes like those discussed here: http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2012-January/001024.html
Nathan Basanese
CC BY-SA 3.0
2015-09-07T15:43:30.623Z
Mentioning script somewhere in your question probably would have helped somewhat. The scripting language is somewhat dwarfed by the rest of the repository.
Claris
CC BY-SA 3.0
2015-09-07T16:22:22.110Z
Static analysis is a very broad field.  Can you give some hints as to what kind of analysis you have in mind?
Nate Eldredge
CC BY-SA 3.0
2015-09-08T06:42:28.613Z
Mostly just the cryptography, actually.
Nathan Basanese
CC BY-SA 3.0
2015-09-08T07:02:39.263Z
Are there really that many failures, at the moment, for the current client? I'm not asking about the _field_ of static analysis.
Nathan Basanese
<bitcoin-core><client><compiling>
Where does the current Bitcoin Core currently fail static analysis, if at all?
Nathan Basanese
# Where does the current Bitcoin Core currently fail static analysis, if at all?

(Asked by: username_0 on 2015-09-06)

I am looking into static analysis, and I'd like to know what to expect in the case of Bitcoin's main implementation, Bitcoin-Core.

That way, if I try static analysis on [Bitcoin](https://github.com/bitcoin/bitcoin), I will know whether I've done it properly (e.g. I get something other than "Yay, everything's fine!" or "Boo, all is broken!").

There doesn't seem to be much out there beyond `make check` and [some Github issues](https://github.com/bitcoin/bitcoin/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aopen%20%22static%20analysis%22).

It could maybe stand some more independent research, but I want to check whether *somebody* out there knows this *already* (and is willing to subject themselves to the vagaries of the stackexchange communities enough to answer it).

**What are the current known static analysis issues with Bitcoin core, if any?**

**Tags:** bitcoin-core, client, compiling

> **Comments:**
> **username_0**: Please feel free to post a comment if I'm not making this clear enough? Also note that I'm not talking about static analysis of Bitcoin opcodes like those discussed here: http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2012-January/001024.html  
> **username_1**: Mentioning script somewhere in your question probably would have helped somewhat. The scripting language is somewhat dwarfed by the rest of the repository.  
> **username_2**: Static analysis is a very broad field.  Can you give some hints as to what kind of analysis you have in mind?  
> **username_0**: Mostly just the cryptography, actually.  
> **username_0**: Are there really that many failures, at the moment, for the current client? I'm not asking about the _field_ of static analysis.  

---

## 0 answers

