linux-kernel - Re: [Cocci] [PATCH v2 4/8] scripts: add glimpse.sh for indexing the kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 17 Jun 2016 17:18:37 +0200
From:	SF Markus Elfring <elfring@...rs.sourceforge.net>
To:	Julia Lawall <julia.lawall@...6.fr>
Cc:	cocci@...teme.lip6.fr, linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>,
	Christian Lamparter <chunkeey@...glemail.com>,
	David Woodhouse <dwmw2@...radead.org>,
	Dmitry Torokhov <dmitry.torokhov@...il.com>,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Hauke Mehrtens <hauke@...ke-m.de>,
	Jiri Slaby <jslaby@...e.com>,
	Johannes Berg <johannes@...solutions.net>,
	Josh Boyer <jwboyer@...oraproject.org>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	"Luis R. Rodriguez" <mcgrof@...nel.org>,
	Mark Brown <broonie@...nel.org>,
	Michal Marek <mmarek@...e.com>,
	Mimi Zohar <zohar@...ux.vnet.ibm.com>,
	Ming Lei <ming.lei@...onical.com>,
	Stephen Boyd <stephen.boyd@...aro.org>,
	Takashi Iwai <tiwai@...e.de>,
	Vikram Mulukutla <markivx@...eaurora.org>
Subject: Re: [Cocci] [PATCH v2 4/8] scripts: add glimpse.sh for indexing the
 kernel

> I'm not sure that this is worth it.  It adds a dependency on a tool
> that seems not to be well maintained.

Would any developers like to achieve further software improvements by
additional means?
How are the chances for corresponding progress from an approach like in
a repository by Luis?
https://github.com/mcgrof/glimpse


> In terms of Coccinelle, I'm not sure that it gives a big benefit.

Under which circumstances will the indexing efforts pay off?


> Attached is a graph showing the file selection time for Coccinelle for a
> selection of fairly complex semantic patches.

Would you like to share more information about test cases for this report?
Which scripts measured the shown data points?

Regards,
Markus