Manual code review and static code analysis tools
Hi! Do you use any manual code review and/or static code analysis tools? Thoughts? If yes, which are the biggest pain points you have?
My experience with these tools is that they are a great way to see how the code evolves during a project, help you keep it clean in maintenance mode, and may even teach you a couple of things about good coding practices. Just don't let it fall into the hands of management. They will love all those metrics and graphs, and soon enough you will have goals and performance reviews based on it.
Up until recently a big pain point for me was finding code which could block within a time constrained function (aka realtime safety). There weren't any tools out there, so I ended up making one with llvm named stoat[1] (originally static function property verification, sfpv). It's hard to say if this tool would really have wider usefulness as it essentially is just checking function attributes on the transitive closure of the callgraph, but it works for me.