Tool Talk: CodeChecker
summary
Open-source CodeChecker drives Clang-based analyzers, stores results in a database and serves a web UI; it adds cross-translation unit analysis and clearer warning messages, and integrates with code review and IDEs. On a tmux demo a baseline run reports 98 → 260 reports when CTU is enabled, analysis time triples, and 77 of the CTU findings are new including null pointer dereference, division by zero and uninitialized reads. Plans include statistical checkers (handle-if-90%-rule) and summary-based scaling.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:36Why we chose Clang in 2013
- 1:03Codechecker overview
- 2:54Contributions to Clang
- 3:04Cross Translation Unit (CTU) analysis
- 3:27New Checkers
- 4:19Improved quality of warnings
related talks
01h 12mFinding Bugs with Clang at Compile and Run Time
29m“The Current State of (free) Static Analysis"
36mThings I learned from the static analyzer
22mWriting safe and secure code
36mCode Analysis: Empowering developers to write performant, reliable, and safe C++
01h 01mMake Friends with the Clang Static Analysis Tools
40mEnterprise-scale static analysis: A Pinpoint experience
47mA Root Canal Static Analysis Based Audit of Zephyr