<story><title>Open-sourcing Facebook Infer: Identify bugs before you ship</title><url>http://code.facebook.com/posts/1648953042007882</url></story><parent_chain><item><author>guepe</author><text>The types of issues discovered (they mention null pointer access and resource and memory leaks) is much smaller than what a tool like Coverity will find (I use it). And they analyze C and Java, two languages supported by Coverity, a very mature tool...&lt;p&gt;I am not certain of the proposed value, except it&amp;#x27;s free to other than Facebook - but not to Facebook, who pays engineers to develop this...
Is this some kind of NIH syndrom by Facebook, or is there something I missed ?</text></item></parent_chain><comment><author>Rezo</author><text>Coverity is great, but for example on the mid-size service (10s but not 100s of kloc) that my team works on the analysis still takes hours. Therefore we only do it for prod releases, not on every commit or CI deployment.&lt;p&gt;If you want to make static analysis part of the everyday development process, it has to be 1) very quick, ideally seconds; minutes at most 2) preferably something the developer can just run locally before pushing a change. If it&amp;#x27;s fast and easy enough, it simply becomes another code hygiene tool like a code formatter that you&amp;#x27;ll run continuously, perhaps even directly integrated into something like IntelliJ.&lt;p&gt;To me Infer sounds like a nice complement to Coverity to catch issues as close to where they are introduced as possible. It might even be Good Enough for many projects to be the only tool, since Coverity is pretty expensive.</text></comment>
<story><title>Open-sourcing Facebook Infer: Identify bugs before you ship</title><url>http://code.facebook.com/posts/1648953042007882</url></story><parent_chain><item><author>guepe</author><text>The types of issues discovered (they mention null pointer access and resource and memory leaks) is much smaller than what a tool like Coverity will find (I use it). And they analyze C and Java, two languages supported by Coverity, a very mature tool...&lt;p&gt;I am not certain of the proposed value, except it&amp;#x27;s free to other than Facebook - but not to Facebook, who pays engineers to develop this...
Is this some kind of NIH syndrom by Facebook, or is there something I missed ?</text></item></parent_chain><comment><author>Alupis</author><text>Findbugs is also very good for Java apps, and is free. (Developed by the University of Maryland)[1]&lt;p&gt;[1] &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;findbugs.sourceforge.net&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;findbugs.sourceforge.net&amp;#x2F;&lt;/a&gt;</text></comment>