[LBBS-150] Identify issues using static analysis tools
There are a number of tools that can help identify issues to perform static analysis, fuzzing, etc.
- GitHub's CodeQL (already part of the CI)
- Coverity Scan: https://scan.coverity.com/
- valgrind's DRD thread error detector: https://valgrind.org/docs/manual/drd-manual.html
cppcheck- http://cppcheck.net/perfandgproffor performance analysisgcovandLCOV(https://github.com/linux-test-project/lcov) for code coveragesetuid/SELinuxmay also be worth considering
Comments
You must be logged in to leave a comment.