"This is part one of a two part series of posts by myself and Bryan
Sullivan; I will cover the static analysis tools we use at Microsoft
(and make available publicly) for analyzing unmanaged (ie; Native) C
and C++ code, and Bryan will cover managed code static analysis in a
later post.
I’m a huge fan of static analysis tools; actually, I’m a fan of any
tooling that beneficially automates any portion of the software
development process. Software development is a complex business, and
anything you can do to make the process more repeatable, predictable
and reduces ‘friction’ is a big win in my book."
Read more: http://blogs.msdn.com/sdl/archive/2009/06/29/static-analysis-tools-and-the-sdl-part-one.aspx
