Getting the most out of static analyzers

Static analysis improves software quality and saves time by catching bugs early in the development process. Today at Facebook, two small teams build static analysis tools that support thousands of engineers and millions of lines of code. But to continue getting the most value out of static analyzers, we must be able to quickly adapt our tools to prevent the problems of tomorrow. In this talk, I will discuss designing static analysis frameworks that make it easy to add new bug types, analyses, and languages while maintaining the stringent requirement of scaling to Facebook-size code.