Lynxbee topic

Static Analysis

Articles about Static Analysis.

Use Splint for C Analysis—and Know When to Move On

Splint can still expose useful C mistakes through annotations and strict checking, but its last upstream release is from 2007. Use it for legacy compatibility or learning—not as the only security control—and pair it with current compilers, path-sensitive analyzers, sanitizers, tests, and human review.

Fix PHP count(): Value Must Be Countable

An empty array is valid input to count() and returns zero. This warning means the runtime value is null, scalar, or otherwise non-countable; find where the type contract broke, then fix or normalize it intentionally.

Use Splint for C Analysis—and Know When to Move On

Fix PHP count(): Value Must Be Countable

Useful technical knowledge, not inbox noise.