Clang Static Analysis

on YouTube ↗54m

" summary

Clang static analyzer performs path sensitive symbolic execution with a strong memory model and finds deep bugs but currently lacks cross‑translation‑unit analysis; Clang‑tidy does mainly syntax‑tree matching and safe rewrites for modernization and guidelines. Cod Checker provides a web UI, incremental and differential views and CI integration; the recommended workflow is local incremental runs plus nightly full analysis. Code changes that reduce macros and add annotations and custom asserts cut false positives and make the results actionable.

AI-written summary · about

" chapters (24)

1. 0:00Intro
2. 0:19OUTLINE
3. 2:57HALTING PROBLEM
4. 4:01APPROXIMATION
5. 5:16WHY BOTHER WITH STATIC ANALYSIS?
6. 7:20ANALYZING C++ IS HARD
7. 9:31STATIC ANALYSIS METHODS
8. 11:00MATCHING THE SYNTAX TREE
9. 12:27FLOW SENSITIVE ALGORITHMS
10. 15:05PATH SENSITIVE ALGORITHMS
11. 17:02SYMBOLIC EXECUTION
12. 18:36MODELING MEMORY
13. 19:51CONTEXT SENSITIVITY (INTRA/INTERPROCEDURAL)
14. 20:33CROSS TRANSLATION UNIT ANALYSIS
15. 22:05GLOBAL ANALYSIS
16. 23:17SUMMARY BASED ANALYSIS
17. 24:17OPEN SOURCE TOOLS
18. 24:31CLANG STATIC ANALYZER
19. 25:02CLANG TIDY
20. 27:04HOW TO INTEGRATE INTO THE WORKFLOW?
21. 32:04HOW TO USE CODECHECKER?
22. 34:12WRITING STATIC ANALYSIS FRIENDLY CODE
23. 43:17CONCLUSION
24. 44:13REFERENCES

" related talks

• 13mKeep your code sane with clang-tidyDaniel Jasper · Meeting C++ 2015
• 01h 02mBringing clang-tidy magic to Visual Studio C++ DevelopersVictor Ciura · Meeting C++ 2017
• 57mLLVM Optimization RemarksOfek Shilon · CppCon 2022
• 54mCompile-Time Validation in C++ ProgrammingAlon Wolf · CppCon 2024
• 28mC2Rust: Migrating Legacy Code to RustPer Larsen · RustConf 2018
• 01h 00mTeaching old compilers new tricksTony Wasserka · Meeting C++ 2018
• 25mAre we *actually* IDE yet? A look on the Rust IDE StoryIgor Matuszewski · Rust Belt Rust 2019
• 05mOur Most Treacherous AdversaryJames McNellis · Meeting C++ 2025