Splint Code Analyzers for C

Question

We plan to use Splint as a code analyzer for our C code base, but we have never tried the Splint tool before, so we want your contribution to it to increase the pros and cons.

Answer 1

Read this post and these slides to get a quick overview of what it can do for you.

Answer 2

Lint , , , . , . , , (, ). . , , .

SANS, : http://www.sans.org/reading_room/whitepapers/securecode/secure-software-development-code-analysis-tools_389

Answer 3

Splint , (, , , , ). Splint , ints float. Splint .

: splint hello.c.

Answer 4

waffleman, . , , . , .

:

bar (char **output) 
{
  *output = malloc(100);
}
foo()
{
  char *output=NULL;
  bar(&output)   
}

. foo NULL . 100 .

, , . , , , . , , Splint .

Answer 5

, . , , , .