Re: GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects

From: Darren Kenny <darren.kenny@oracle.com>
To: Daniel Kiper <daniel.kiper@oracle.com>, grub-devel@gnu.org
Cc: alec.r.brown@oracle.com, amakhalov@vmware.com,
	arvidjaar@gmail.com, chris.coulson@canonical.com,
	development@efficientek.com, dja@axtens.net, git@xen0n.name,
	jag.raman@oracle.com, jan.setjeeilers@oracle.com,
	kanth.ghatraju@oracle.com, konrad.wilk@oracle.com,
	mbenatto@redhat.com, pfsmorigo@canonical.com, phcoder@gmail.com,
	pjones@redhat.com, ps@pks.im, ross.philipson@oracle.com
Subject: Re: GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects
Date: Tue, 28 Nov 2023 17:57:40 +0000	[thread overview]
Message-ID: <m2wmu1zror.fsf@oracle.com> (raw)
In-Reply-To: <ZWYcc6RJ8GbmngAb@tomti.i.net-space.pl>

Hi Daniel,

Great to know the target was reached.

The last set of issues seemed to be a real challenge.

You set a high bar as a maintainer, encouraging everyone towards a
resolution and making GRUB all the better for it.

Well done all!

Thanks,

Darren.

On Tuesday, 2023-11-28 at 17:59:31 +01, Daniel Kiper wrote:
> Hi,
>
> It is our pleasure to inform you that we were able to achieve 0 outstanding
> defects for the GRUB Coverity x86_64/EFI and ARM64/EFI runs. We did analysis
> of 629 issues and fixed 535 of them. The rest has been dismissed mostly as
> false positives. This work allowed us to improve overall GRUB code quality,
> reliability and security. We will continue using the Coverity to verify
> correctness of newly introduced code and existing one.
>
> The Coverity analysis and fixing of reported issues was initiated by Andrei
> Borzenkov in 2014. Later Vladimir Serbinenko joined and together continued this
> work until 2017. We restarted using the Coverity analyzer in 2020, when we were
> fixing BootHole security vulnerability and other issues. It took us 3 years to
> do analysis of all Coverity issues not solved earlier. It was very tedious
> process requiring hundreds of hours of code analysis done by many people. We
> think it is important to name all, in alphabetical order, who tirelessly worked
> to null out all defects reported by the Coverity:
>   - Alec Brown (Oracle),
>   - Alexey Makhalov (VMware),
>   - Andrei Borzenkov,
>   - Chris Coulson (Canonical),
>   - Daniel Axtens,
>   - Darren Kenny (Oracle),
>   - Glenn Washburn,
>   - Jagannathan Raman (Oracle),
>   - Jan Setje-Eilers (Oracle),
>   - Konrad Rzeszutek Wilk (Oracle),
>   - Marco A Benatto (Red Hat),
>   - Patrick Steinhardt,
>   - Paulo Flabiano Smorigo (Canonical),
>   - Ross Philipson (Oracle),
>   - Vladimir Serbinenko,
>   - WANG Xuerui.
>
> Thank you for doing this work guys! This success would not be possible without you!
>
> Daniel

_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel