infer

M8... https://github.com/facebook/infer

https://github.com/facebook/pyre-check https://github.com/facebook/flow https://github.com/facebook/infer https://github.com/facebook/hhvm/tree/master/hphp/hack

> One particular issue we fixed a couple of times in TigerBeetle is replacing by-value with by-pointer loops: I don't know about other tools and places, but one nice thing about working at Facebook is the internal Infer linter tool[1] is generally good about producing warnings for "this copy could be a ref instead"[2] (in the majority C++ codebase) at code review time, without manually combing the LLVM IR for memcpys. (Internally, Infer is using several handwritten analyses on C++ AST.) Reading further, it seems like they are essentially looking for the pattern where a memcpy call is generated with a large constant size parameter at compile time. Things of this nature should be somewhat easy to write a static analyzer pass for, if you've got an existing AST/SSA level framework. I believe there is already an Infer pass for this for C++,

> Maybe you could write tests as queries that would test a whole set of possible programs, not only the current version of your program at the moment. I think that the future of programming is more sophisticated static analysis. Programmers will write statements like, "every code path that writes to the Payments database must have called validate_user()." Then, the tooling will confirm that rule with every commit. We kind of have this already (for example, Facebook's Infer tool [0]), but I think it will become much more important in the coming decade. 0: https://github.com/facebook/infer

Great question! Formal methods groups in industry are growing rapidly and popping up in surprising places. Amazon's group is probably the most famous, but I think pretty much every big tech company has something going on in the formal verification / static analysis space. There's also a lot going on in blockchain. It's definitely becoming harder to hire people with FM skills, so in that sense, I think it's a great space to get into. The downside is that the space is quite fragmented and a lot of tools have a high skill bar. If I was starting out, I'd probably focus on static analysis (eg. Infer or something similar - https://github.com/facebook/infer) because those tools tend to be easier to learn, and they have the potential to scale to really big systems. In contrast, Coq is a fine tool, but most people learn it by going to grad school

To everyone interested - since recently[1] it supports SARIF[2] output, thus could be easily integrated[3] with the GitHub. [1] https://github.com/facebook/infer/commit/9ec6cef8d1f48462919... [2] http://docs.oasis-open.org/sarif/sarif/v2.0/csprd01/sarif-v2... [3] https://docs.github.com/en/code-security/code-scanning/integ...

Looks active (as of 8 days ago) https://github.com/facebook/infer

Plus Facebook with their Flow[1], Infer[2][3], Airbus with their BinCAT[4], and Frama-C[5]. [1] https://github.com/facebook/flow [2] https://fbinfer.com/ [3] https://github.com/facebook/infer [4] https://github.com/airbus-seclab/bincat [5] http://frama-c.com/

https://github.com/facebook/infer Seems cool.

Free hint for the GitLab - they can integrate a similar but open source tool - Infer[1]. Essentially it provides the similar features, just lacks a good interface to do so. They also have a query language, called AL[2]. It is way less polished than Semmle, but opensource and with a good potential. [1] https://github.com/facebook/infer [2] https://fbinfer.com/docs/linters.html

When you say non-language, do you mean unrelated to OCaml specifically or any language? Facebook implemented its infer linter for C, C++, Java, and Objective-C in OCaml: https://github.com/facebook/infer. When I worked at Bloomberg, they released BuckleScript for JS development. Not sure if that caught on though.

>>> Does Facebook actually want you to just use Ocaml? Facebook already uses OCaml. https://github.com/facebook/infer