Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Get HideMyAss! VPN, PC Mag's Top 10 VPNs of 2016 for 55% off for a Limited Time ×

Submission + - Are code analysis tools always correct? (ibm.com)

An anonymous reader writes: I work at a company that makes software for call center optimization. Recently my boss arranged for my code to be tested by IBM AppScan tools for cross site scripting vulnerabilities. It found 233 of them, but most of them are false positives. Now my boss won't ship my code and has inserted an extra level of oversite on my outputs. No doubt other developers have experienced what I have, being smarter than IBM isn't hard after all, but I'm not sure how to convince my boss of this. Any tips?
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Are code analysis tools always correct?

Comments Filter:

...when fits of creativity run strong, more than one programmer or writer has been known to abandon the desktop for the more spacious floor. - Fred Brooks, Jr.

Working...