Comment by lou1306

2 days ago

Weird that Infer [1] was not included in the evaluation. It supports C/C++ and its underlying reasoning framework (Separation Logic [2]) is exactly geared towards checking memory safety.

[1] https://fbinfer.com/

[2] https://en.wikipedia.org/wiki/Separation_logic

Sanitizers are runtime tools, not static analysis tools.

Static analyzers are also virtually never sound as sound tools produce an outrageous number of false positives, especially when languages that so easily permit nonlocal mutation.