Toward a Just-in-Time Static Analysis

摘要: Despite years if not decades of research and development on static analysis tools, industrial adaption much this tooling remains spotty. Some is due to familiar shortcomings with the itself: effect false positives developer satisfaction well known. However, in paper, we argue that static-analysis results often run against some cognitive barriers. In other words, able grasp easily, leading higher abandonment rates for tools. propose improve current situation idea Just-In-Time (JIT) analyses. a JIT analysis, are presented user order difficulty, starting easy-to-fix warnings. These warnings designed gently “train” prepare them reasoning about fixing more complex bugs. The itself operate layers, so next layer being computed while previous one examined. desired available just-in-time, never needing wait be computed.