netdev - RE: Does the Community use Coverity ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 21 Dec 2015 18:22:03 +0000
From:	Jeff Haran <Jeff.Haran@...rix.com>
To:	pavi1729 <pavitra1729@...il.com>
CC:	"kernelnewbies@...nelnewbies.org" <kernelnewbies@...nelnewbies.org>,
	"linux-fsdevel@...r.kernel.org" <linux-fsdevel@...r.kernel.org>,
	"linux-mmc@...r.kernel.org" <linux-mmc@...r.kernel.org>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: RE: Does the Community use Coverity ?

> -----Original Message-----
> From: pavi1729 [mailto:pavitra1729@...il.com]
> Sent: Thursday, December 17, 2015 2:04 AM
> To: Jeff Haran
> Cc: kernelnewbies@...nelnewbies.org; linux-fsdevel@...r.kernel.org;
> linux-mmc@...r.kernel.org; netdev@...r.kernel.org
> Subject: Re: Does the Community use Coverity ?
> 
> Sanket, Jeff,
>     Thanks a ton, that was helpful.
> 
> Cheers,
> Pavi

Pavi,

I suggest that if you get the chance, check out their code browser. Click on one of the bugs in the Linux project and then click the folder icon at the top of the lower left pane to get to the source code. It's ability to cross reference is the best out there. It eliminates all the false positives in cross reference results that you get from more traditional token matching based browsers like cscope, ctags, etc.

Jeff Haran
 
> On Wed, Dec 16, 2015 at 12:32 AM, Jeff Haran <Jeff.Haran@...rix.com>
> wrote:
> >>-----Original Message-----
> >>From: kernelnewbies-
> bounces+jharan=bytemobile.com@...nelnewbies.org
> >>[mailto:kernelnewbies-
> >>bounces+jharan=bytemobile.com@...nelnewbies.org] On Behalf Of
> >>pavi1729
> >>Sent: Monday, December 14, 2015 11:03 PM
> >>To: kernelnewbies@...nelnewbies.org; linux-fsdevel@...r.kernel.org;
> >>linux- mmc@...r.kernel.org; linux-netdev@...r.kernel.org
> >>Subject: Does the Community use Coverity ?
> >>
> >>Hi,
> >>  May I know if the community uses the Coverity tool and, if yes where
> >>can I find a repo of Coverity scans of kernels and IGNORE LIST; cause
> >>there obviously would be false positives.
> >>
> >>Cheers,
> >>Pavi
> >
> > https://scan.coverity.com/
> >
> > Sign up for an account and join the Linux project.
> >
> > Jeff Haran
> >