I am just wondering which type of pointer analysis cppcheck is currently using? And is there any specific reason behind that? Do you think it would be beneficial to provide more powerful pointer analysis (e.g., flow-sensitive or context sensitive)?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
It's not very easy to answer this. There is not a definite answer. We have flow sensitive analysis mostly. We can analyze function calls also however I would not say that the analysis is "context sensitive" and the analyzer does not go very deep. There is whole program analys for buffers passed as parameters but that is not "context sensitive".
If more powerful analysis can be provided that is of course beneficial.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I am just wondering which type of pointer analysis cppcheck is currently using? And is there any specific reason behind that? Do you think it would be beneficial to provide more powerful pointer analysis (e.g., flow-sensitive or context sensitive)?
It's not very easy to answer this. There is not a definite answer. We have flow sensitive analysis mostly. We can analyze function calls also however I would not say that the analysis is "context sensitive" and the analyzer does not go very deep. There is whole program analys for buffers passed as parameters but that is not "context sensitive".
If more powerful analysis can be provided that is of course beneficial.