linux-kernel - Smatch v1.56 released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Sun, 4 Mar 2012 21:04:55 +0300
From:	Dan Carpenter <dan.carpenter@...cle.com>
To:	linux-kernel@...r.kernel.org, smatch@...r.kernel.org
Subject: Smatch v1.56 released

It's been almost two years since the last Smatch release so probably
it's time for another one.

Smatch is a static analysis tool for C which has a lot of kernel
specific checks.

To run Smatch over the entire kernel use:
	smatch_scripts/test_kernel.sh

To run Smatch over just one .c file, start at the base of the kernel
tree and use:
	smatch_scripts/kchecker path/to/file.c

The main new thing, is the new cross function database work.  You
build a database on the first run and then use the information on
the second run.  The script for to build the database is:
	smatch_scripts/build_kernel_data.sh

Smatch still produces a lot of false positives.  Also as bugs get
fixed in the kernel, the false positive to real bug ratio gets
worse and worse.  But it does find real bugs as well.

There is a mailing list smatch@...r.kernel.org.

regards,
dan carpenter

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)