Implementing static analysis checkers in the middle-end - GNU Tools Cauldron 2018
Presented by Martin Sebor at GNU Tools Cauldron 2018
An overview of benefits and challenges of implementing warnings in the GCC middle-end. Using specific examples I will go over some of the disadvantages of front-end warnings and show how they can be overcome by relying on control- and data-flow analyses in the middle-end. I will go over some of the biggest technical as well as social challenges in achieving acceptable ratio between false negatives, false positives, and true positives.