Using static code analysis tools and detecting and fixing identified issues is very important in order to improve the quality and security of the code baseline.
CodeChecker (https://github.com/Ericsson/codechecker ) is an open source analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
It provides a number of additional features:
Good visualization of problems in the code
Overview of results for the whole product
Filtering
Cross translational unit analysis and statistical checkers support
Suppression handling
And many others...
These features simplify the follow up of results and make it more efficient.
In the video, an overview of features and capabilities of CodeChecker is demonstrated as well as a description and recommendation of how to introduce new tools.
Slides: https://www.slideshare.net/OliveraMil...
Useful links:
open source project: https://github.com/Ericsson/codechecker
http://codechecker-demo.eastus.clouda...
demo/demo
https://codechecker.readthedocs.io/en...
http://clang-analyzer.llvm.org/availa...
http://clang.llvm.org/extra/clang-tid...
Other related videos about Clang Static Analyzer and CodeChecker that goes a bit more deeply into how Clang Static Analyzer works:
Clang Static Analysis - Meeting C++ 2016 Gabor Horvath https://www.youtube.com/watch?v=UcxF6...
CppCon 2016: Gabor Horvath “Make Friends with the Clang Static Analysis Tools" https://www.youtube.com/watch?v=AQF6h...