Static Analysis for Humans
  • Blog
  • About
  • Legal Notice
  • LinkedIn
  • Twitter
  • RSS Feed
Subscribe
  • Static Analysis vs. GenAI: Who is the superior bug hunter?

    Static Analysis vs. GenAI: Who is the superior bug hunter?

    GenAI will not replace Static Analysis. Yes, GenAI can understand code in any language, and also knows about unsafe programming patterns. But it is not reliable enough to reason about bugs in your code, just like humans. Instead, it has other strengths that… read more …

  • Defensive Coding – its love story with Static Analysis

    Defensive Coding – its love story with Static Analysis

    Defensive coding improves software quality, but it has downsides. In this article we discuss why it fits well together with Static Analysis, and how both make each other stronger. The result is more robust software, and less warnings from your Static Analysis tool.… read more …

  • Stupid False Positives: Inevitable and cryptic, yet easy to fix

    Stupid False Positives: Inevitable and cryptic, yet easy to fix

    The big weakness of Static Analysis is, that it can throw needless warnings, even if our software is “perfect”. In this article, we learn why Static Analysis must do that, why it can be wiser to change your code instead of managing warnings,… read more …

  • What’s better – Static or Dynamic Analysis? The human answer…

    What’s better – Static or Dynamic Analysis? The human answer…

    Since there is “Static” Analysis, does “Dynamic” Analysis also exist? Yes, it does. However, Static Analysis is much better suited to help writing better software. It is truly independent from human limitations, and can easily be used during early development. But Dynamic Analysis… read more …

  • Panic: Memory Safety is less safe than you think

    Panic: Memory Safety is less safe than you think

    Memory safety is often tragically misunderstood. Claims like “it eliminates all memory errors” are at best misleading, and can be a recipe for disaster. In this article, I will explain what it really means, where it has limits, and why Static Analysis is… read more …

  • Under the Hood of Static Analysis, and how to boost your results

    Under the Hood of Static Analysis, and how to boost your results

    The idea of Static Analysis sounds simple: Read the code, check each line, and report the bad stuff. However, it is far from easy. In this article, we look at the challenges that it has to overcome, and dive a little bit into… read more …

  • What is Static Code Analysis?

    What is Static Code Analysis?

    In this article, you will learn what Static Analysis is, why it is loved and hated by developers at the same time, and how it can be used for writing better software or to annoy your colleagues. Imagine you have a tiny detective… read more …

  • About this Blog

    About this Blog

    Software has too many stupid bugs. Some for technical reasons, and some for human reasons. However, many of them are easily avoidable, if we only use the right technology. With this blog, I want to talk about that technology, and how to apply… read more …

Previous Page
1 2

For software engineers who want static analysis to actually work. Practical techniques, honest trade-offs, no tool vendor spin.

ai aliases bugs cwe errors exception false positives flow analyis guidelines human error memory methods parser process rust safety security tricks

  • LinkedIn
  • Twitter
  • RSS Feed