The authors' industry experiences suggest that compiler warnings, a lightweight version of program analysis, are valuable early bug detection tools. Significant costs are associated with patches and security bulletins for issues that could have been avoided if compiler warnings were addressed. Yet, the industry's attitude towards compiler warnings is mixed. Practices range from silencing all compiler warnings to having a zero-tolerance policy as to any warnings. Current published data indicates that addressing compiler warnings early is beneficial. However, support for this value theory stems from grey literature or is anecdotal. Additional focused research is needed to truly assess the cost-benefit of addressing warnings.
翻译:作者的行业经验表明,汇编者警告是程序分析的轻量级版本,是宝贵的早期错误检测工具,对于如果处理汇编者警告本可以避免的问题,与补丁和安全公告相关的费用很大,然而,该行业对汇编者警告的态度参差不齐,从封存所有汇编者警告到对任何警告采取零容忍政策的做法不一而足。目前公布的数据表明,处理汇编者预警的早期处理是有益的。然而,对这一价值理论的支持来自灰色文献或传闻。还需要开展更多的重点研究,以真正评估处理警告的成本效益。