Splint Reviews and Details

Social recommendations and mentions

• Git: Introduce Rust and announce that it will become mandatorty

  > My gut feeling is You're probably right, I was saying it just can be transferred, with a large "just". > the fact that neither GCC nor Clang appear to have discussed reusing concepts from their optimizer passes to recreate the borrow checker or borrow checker-like functionality There is however a commitment from GCC, that every UB the compiler exploits must be reported by -fanalyzer, otherwise it's a compiler... - Source: Hacker News / about 1 year ago

• C-rusted: The Advantages of Rust, in C, without the Disadvantages

  Whenever I see people talk about the portability or compatibility advantages of C, I'm reminded of how "even C isn't compatible with C", because you typically aren't talking about up-to-date GCC or LLVM on these niche platforms... you're talking about some weird or archaic vendor-provided compiler... Possibly with syntax extensions that static analyzers like splint will choke on. (Splint can't even understand near... Source: over 3 years ago

• Announcing Rust 1.67.1

  Huh. I think I actually needed to use the equivalent position for certain splint annotations in my C retro-hobby project. Source: over 3 years ago

• US NGO Consumer Reports also reporting on C and C++ safety for product development.

  I often like to say that Rust's bindings are a way to trick people into writing the compile-time safety annotations that they didn't want to write for things like splint. (Seriously. Look into how much splint is capable of checking with the correct annotations.). Source: over 3 years ago

• “Rust is safe” is not some kind of absolute guarantee of code safety

  Linters like Splint [0] can do that for C. I’m not saying that Rust’s built-in approach isn’t better, but please be careful about what exactly you claim. [0] http://splint.org/. - Source: Hacker News / about 4 years ago

• Glauber's Journey from rust to typescript

  (Sort of like how, for my DOS hobby project, I use splint to require explicit casts between typedefs so I can use the newtype pattern without having to manually reach into wrapper struct fields in places that don't do conversions.). Source: about 4 years ago

• Why did you switch from another language to Rust? Do you regret not learning it earlier?

  Tuple-based error returns with manual checking every time? "Generics for me and not for thee" APIs for collections? Structural typing when I already use splint to retrofit newtype-esque type-checking onto typedefs for my Open Watcom C/C++ DOS retro-hobby project? No thanks. Source: about 4 years ago

• Which Rust projects have been renamed at some point in time?

  I wasn't aware their name changed, but, now that I am, I have to say that I'm not a fan of the new name. It sounds like it's competing with Clippy or splint, not Qt Quick or Flutter. Source: over 4 years ago

• One of the longest standing soundness holes in Rust -- Diving Deep: implied bounds and variance

  (and I've been taking cues from Rust to find ways to make my code more robust. Things like using splint in my makefile so that explicit casts are required between typedefs like row and column or taking a cue from Rust, Pascal, and the IBM BIOS int APIs and writing my own string slice struct and string handling functions... Which make zero-copy parsing and "allocate on the stack in a higher frame and pass in as an... Source: over 4 years ago

• Why is this not giving any warning for returning address of local variable?

  Yeah, I used tool called Splint . Splint detected that problem. Source: about 5 years ago