Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Depends upon the software.

I find valgrind easy on Linux and ktrace(1) on OpenBSD easy to use. I do not spend much time, plus I find testing my items on Linux, OpenBSD and NetBSD tends to find most issues without a lot of work and time.



This is not a "companies don't spend enough time with static and dynamic analysis of their software" problem, it's "less than a third of companies I worked or consulted for in the past 20 years mandated having input validation of any kind" problem.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: