1.0Croteamhttp://www.croteam.comnikolahttp://www.croteam.com/author/nikola/rich600338<blockquote class="wp-embedded-content" data-secret="dssDQgNDu2"><a href="http://www.croteam.com/analyzing-the-analyzer/">Bugs in our code? No waaaay….</a></blockquote><iframe sandbox="allow-scripts" security="restricted" src="http://www.croteam.com/analyzing-the-analyzer/embed/#?secret=dssDQgNDu2" width="600" height="338" title="“Bugs in our code? No waaaay….” — Croteam" data-secret="dssDQgNDu2" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" class="wp-embedded-content"></iframe><script type="text/javascript"> /* <![CDATA[ */ /*! This file is auto-generated */ !function(d,l){"use strict";l.querySelector&&d.addEventListener&&"undefined"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!/[^a-zA-Z0-9]/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),o=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),c=new RegExp("^https?:$","i"),i=0;i<o.length;i++)o[i].style.display="none";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute("style"),"height"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):"link"===t.message&&(r=new URL(s.getAttribute("src")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",function(){for(var e,t,s=l.querySelectorAll("iframe.wp-embedded-content"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute("data-secret"))||(t=Math.random().toString(36).substring(2,12),e.src+="#?secret="+t,e.setAttribute("data-secret",t)),e.contentWindow.postMessage({message:"ready",secret:t},"*")},!1)))}(window,document); /* ]]> */ </script> Serious Engine v1.10 source code was released just recently, but it already provoked the interest of a large number of developers. Among the developers was a company Program Verification Systems, that used it’s static code analyzer to analyze the Serious Engine v1.10 code. Their findings? Well, apparently there are “bugs in the code” and “suspicious code fragments”, but Croteam’s official stance on this matter remains that we write and develop a perfect code! For example, PVS-Studio analyzer claims that it found typos and that there are identical sub-expressions to the left and to the right of the ‘==’ operator. So? One can never be too sure! We were just double checking! Errm, yes, just making sure, that was it. Definitely not a typo. Further on in the analysis, PVS-Studio analyzer tries to pwn us with another finding: “in this code fragment we get a pointer “pwndView”, which is then assigned with NULL, making the condition always false. Most likely the programmer meant to write the inequality operator ‘!=’”. While it may be true that the condition is always false, we’re positive that the programmer knew exactly what he (or she) was doing. Which is more than can be said for our PR department (it’s just me on Thursdays, hi!) that would love to further analyze the analyzer (or just use the word extensively) and its findings, but sadly can’t really understand any of that technical stuff. But if you can, take a look at our careers section – we may have a job for you! A big thanks goes to Svyatoslav Razmyslov from Program Verification Systems for testing Serious Engine v1.10, writing the article and trying to find bugs. Nice try 😉http://www.croteam.com/wp-content/uploads/2016/03/image2-1.png