|
obviously.
CI/CD = Continuous Impediment/Continuous Despair
|
|
|
|
|
I had to work on a code base with a static code checker enforcement. And if you used a 'constant' more than twice it would flag it.
Static code checkers are absolutely worthless.
|
|
|
|
|
jschell wrote: Static code checkers are absolutely worthless.
You must have encountered an (or several) really bad code checkers. Some of them are really good. On the other hand: The good ones are far from cheap. You get what you pay for.
Also, all the ones I have been in touch with, from the very top down to simple lint, has provided mechanisms for suppressing reports on each specific 'defect'. I see no viable justification for treating >2 uses of constant as a defect, so I would disable that test immediately.
Religious freedom is the freedom to say that two plus two make five.
|
|
|
|
|
trønderen wrote: Some of them are really good
None of them can be that good by their very nature. They can only look for simple problems.
And that is only appropriate with a lot of junior programmers and with little, poor or non-existent code reviews.
Often the problems are stylistic in nature as well.
Complex real bugs originate from execution flow which static code checkers cannot detect at all.
trønderen wrote: mechanisms for suppressing reports on each specific 'defect'.
However they are put in place in the context of process. So people fixate on the process and will not allow that. As I have encountered multiple times. They fixate on the idea that it is 'better' without understanding what is going on.
trønderen wrote: down to simple lint,
I worked at hard core linux/unix C and C++ shops along with reading tech journals for years. And far as I recall no one ever considered lint to be a good idea.
trønderen wrote: You get what you pay for.
It was a paid product.
|
|
|
|
|
jschell wrote: None of them can be that good by their very nature. They can only look for simple problems.
It seems quite obvious to me that you have never been introduced to a high quality static analyzer.
It seems to me that if you were offered an opportunity to try out an advanced code analyzer you might reject it as a waste of time, because you know in advance that such animals do not exist.
You are in your full right to think so. And I am in my full right to disagree with you.
Religious freedom is the freedom to say that two plus two make five.
|
|
|
|
|
trønderen wrote: that you have never been introduced to a high quality static analyzer.
Perhaps. You can suggest one if you wish.
I have however, as a principle programmer, been tasked with fixing many bugs which have shown up in production and none of which a static analyzer could have detected.
|
|
|
|
|
jschell wrote: Often the problems are stylistic in nature as well.
It must be possible to disable a lot of the warnings about "code smells" based on things like the C++ Core Guidelines and MISRA. Some of these act as if everyone started development inh C++20, exaggerate their importance, and lead to so many warnings as to make the tool useless. As you say, it gets out of hand if people focus on process--the metrics that these tools spit out--without assessing whether the code really needs to change.
jschell wrote: Complex real bugs originate from execution flow which static code checkers cannot detect at all.
Coverity and Sonarcloud both highlight execution flows that could lead to the use of a null pointer. For example, they'll tell you that if the following 6 branches are taken, you could end up using an invalid pointer. In some cases, they even detect it across a chain of function calls. Perhaps you don't call this static analysis, because it actually analyzes execution flows, but both of these are classified as static analysis tools. Some warnings can be false positives for reasons that the tool can't understand, but they're worth investigating.
|
|
|
|
|
Greg Utas wrote: Perhaps you don't call this static analysis,
I do.
Greg Utas wrote: they even detect it across a chain of function calls
That I have not seen. Unclear if the tool did not look of if they did not exist.
|
|
|
|
|
|
But can it generate itself?
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
It had been awhile since I pulled up the code, but sure enough when I did, I found a Deslanged.Export.cs file in the Deslang project. Such files are created by Deslang itself. So I did use it to build itself.
Check out my IoT graphics library here:
https://honeythecodewitch.com/gfx
And my IoT UI/User Experience library here:
https://honeythecodewitch.com/uix
|
|
|
|
|
Cool stuff honey. The idea of code writing code is one of the first mind blowers that made me want to write code.
Because you guys will like this if you haven't seen it, even though it's likely I found it from here somehow.
This is in the same "codeception" vein.
This image displays the CRC value of the file which contains it.
[^]
|
|
|
|
|
|
The extra Cs evoke the yack/vomit homophone for me.
Never happened with yak/yac/antlr/JavaCC/etc
|
|
|
|
|
|
I thought The Who did My Generation
|
|
|
|
|
I did it too, there is a big company that operates like that for their products.
GCS/GE d--(d) s-/+ a C+++ U+++ P-- L+@ E-- W+++ N+ o+ K- w+++ O? M-- V? PS+ PE Y+ PGP t+ 5? X R+++ tv-- b+(+++) DI+++ D++ G e++ h--- r+++ y+++* Weapons extension: ma- k++ F+2 X
The shortest horror story: On Error Resume Next
|
|
|
|
|
But can it generate DOOM?
Software Zen: delete this;
|
|
|
|
|
Okay honey and all - I might come across harsh here, but why in the heck would you want to do this?
I guess maybe if you wanted your own compiler? I can sort of see that. Context: I live in the land of really old code. Supporting legacy systems is my bread and butter. It's put multiple children through college, paid off the cars, and fed me. Cute and fancy scare me - it's okay, I'm an old ****.
How would one support this? What problem is trying to be solved? Why would it make my life eaiser?
For the record, I'm not a computer scientist, I'm an EE in embedded systems. So, I've never had a class in compiler theory or the more traditional CS studies. Keep your explanation simple 
Charlie Gilley
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
Has never been more appropriate.
|
|
|
|
|
Basically because I wanted templatizable source code that
A) I could visit and transform
B) I could render out to other .NET languages.
Now I'm going to get into the weeds a bit, if not for you then for other readers. Follow along as you can, but it's not critical that you understand this stuff - anyway:
A and B are what Microsoft .NET's CodeDOM allows you to do. It's an abstract syntax tree with objects representing things like CodeConditionStatement for "if" and CodeVariableDeclarationStatement for declaring a local variable.
You can take that tree and render it to C# or VB.NET out of the box. Or other languages if it has a 3rd party provider for it - any language that can work in ASP.NET has a sporting chance of working with this because they both use the CodeDOM to do their magic.
The trouble with the CodeDOM is it doesn't have a parser. You have to build those trees by hand, and they are extremely verbose.
So I wrote one. It parses a CodeDOM compliant subset of C#6 and builds that codedom tree from what you type in.
Viola! I have templatizable, transformable, language agnostic code that now I can write in (almost) C# (C# can express more than the CodeDOM can so I had to limit what I could support). That code is VB.NET code. That code is C#. That code is potentially F# code, etc.
The trouble with *that* is C# doesn't give you type information, and you need that information to fully manifest what you parsed. Otherwise what you get back is ambiguous.
I resolve those ambiguities when I cook that C# subset into a CodeDOM tree. It takes time.
Deslang (my code generator generator) takes that code, does all the cooking, and produces code that can reinstantiate that code tree instantly on demand. Everything was resolved up front, and the result turned into code that produces a code tree that can render code. 
For future transformation or rendering to one of many .NET languages.
Check out my IoT graphics library here:
https://honeythecodewitch.com/gfx
And my IoT UI/User Experience library here:
https://honeythecodewitch.com/uix
|
|
|
|
|
Perhaps a concrete example will make my previous reply clearer.
Rolex: Unicode Enabled Lexer Generator in C#[^]
This is a command line tool that takes many regular expression based rules and generates a DFA lexer in one of many .NET languages. You can add 3rd party languages. (I'm hands off that part, but like IronPython probably has one). VB.NET and C# are supported on any system.
Instead of writing the complicated code to do lexing in CodeDOM AST directly by hand coding new statements.Add(new CodeVariableDeclarationStatement(new CodeTypeReferenceExpression(typeof(int)), "foo", new CodePrimitiveExpression(0))); I can simply do int foo = 0; and it will create those big verbose objects on my behalf.
So I wrote my TableTokenizer using that. I use Deslang to cook it into a codedom tree as a build step. Rolex then transforms that tree during runtime to include the computed DFA table used to make the lexer work (it's a series of int arrays basically, but could be anything)
Check out my IoT graphics library here:
https://honeythecodewitch.com/gfx
And my IoT UI/User Experience library here:
https://honeythecodewitch.com/uix
|
|
|
|
|
"Down, down, down. Would the fall never come to an end? 'I wonder how many miles I've fallen by this time?'"
cheers
Chris Maunder
|
|
|
|
|
I just used my Rolex lexer generator to generate a 5.7MB C# file and at least 95% of it is a single array of integers.
How's that for testing the limits of C# arrays?
Check out my IoT graphics library here:
https://honeythecodewitch.com/gfx
And my IoT UI/User Experience library here:
https://honeythecodewitch.com/uix
|
|
|
|
|
And here I were thinking that my Rolex is just for telling time, oh sorry, just noted it is a Lolex, made in ... 
|
|
|
|
|
In my student days, upon finding the book 'A Million Random Digits with 100,000 Normal Deviates[^], simply because I was fascinated by the madness of publishing a whole book of random numbers. In the Numerical Methods course, we had been through the theory of random number generator. The cost of the book was something like USD 150. It would be a great thing to pass around at parties with other Comp.Sci. students.
Well, I didn't spend the USD 150. Every now and then I regret it. As my link shows, it is still available, but my friends are different now; they don't see the absurdity / humor of it.
If I need a million integers, a generator would fit in a lot less space than 5.7 Mbytes.
(Btw: What makes a file of a million or so integers C#)? I'd think it was either binary or ASCII/ISO8859/UTF8, but neither is language dependent!)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
