Zoncolan: How Facebook uses static analysis to detect, prevent security issues

1 comments

• saagarjha 1706 days ago
  Does this happen to use SPARTA (https://github.com/facebookincubator/SPARTA) for its abstract interpretation?
  [-]
  • phooji 1706 days ago
    Zoncolan and SPARTA both use abstract interpretation at their core, but as far as the code/implementation goes they are mostly unrelated. Zoncolan is built on top of the Hack type checker (https://hacklang.org/), which means that it's largely written in OCaml.