Finding Bugs with Clang at Compile and Run Time

on YouTube ↗01h 12m

" summary

Shows how clang tooling finds bugs at compile and run time: uses clang-tidy plus AST queries (clang-query/clang-check) to implement a custom checker that flags inherited overrides of non‑virtual methods, generates tests and fix‑its, builds against the compilation database and the checker works in the test suite. Demonstrates sanitizers (AddressSanitizer, UBSan, ThreadSanitizer, LeakSanitizer) to catch use‑after‑free, UB, races and leaks at runtime with modest overhead, and cites examples where automated tools found dozens of real defects.

AI-written summary · about

" chapters (18)

1. 0:00Start
2. 8:45Analysis Techniques
3. 12:03Dimensions of Static Analysis
4. 13:43Precision of the Checker
5. 14:43The Level of Static Analysis
6. 16:36The Architecture Level
7. 17:41Cyclic Dependencies
8. 20:09Dynamic Analysis
9. 23:07Infinite Recursive Loop
10. 25:50Overview of Clang
11. 30:08Problem of the Missing Semicolon
12. 37:22Compilation Database
13. 38:05Static Analyzer
14. 40:09Static and Airless Static Analyzer
15. 41:04Static Analysis Checkers
16. 59:04Sanitizers
17. 59:52Refactoring
18. 1:01:35Delete Implicit Generated Method

" related talks

• 14mTool Talk: CodeCheckergabor martin, daniel kopp · SOAP 2020
• 18mDon't Look UB: Exposing Sanitizer-Eliding Compiler OptimizationsHerbert Bos, Klaus von Gleissenthall, Cristiano Giuffrida, Raphael Isemann, Erik van der Kouwe · PLDI 2023
• 59mBeyond Sanitizers...Kostya Serebryany · CppCon 2015
• 01h 03mPurging Undefined Behavior & Intel Assumptions in a Legacy C++ CodebaseRoth Michaels · CppCon 2022
• 01h 02mSanitize your C++ codeKostya Serebryany · CppCon 2014
• 36mThings I learned from the static analyzerBart Verhagen · Meeting C++ 2019
• 34mBetween Building and Testing Your Linux DriverKrzysztof Kozlowski · Open Source Summit Europe 2025
• 29m“The Current State of (free) Static Analysis"Jason Turner · CppCon 2015