Lessons from Building Static Analysis Tools at Google
Adding to why static analysis tools are not used:<p>1. The false positives sometimes lead to ugly workarounds needed to quiet the message.<p>2. There's no standard, meaning different SA tools produce very different results, often contradictory.<p>A better approach is to improve the language. For example, the `(a < b < c)` is tripped by many static analyzers. In D, the grammar was changed so `a < b < c` is not valid. And the C/C++ committees should really deprecate `l` as a valid integer literal suffix :-)