* GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects
@ 2023-11-28 16:59 Daniel Kiper
2023-11-28 17:57 ` Darren Kenny
0 siblings, 1 reply; 3+ messages in thread
From: Daniel Kiper @ 2023-11-28 16:59 UTC (permalink / raw)
To: grub-devel
Cc: alec.r.brown, amakhalov, arvidjaar, chris.coulson, darren.kenny,
development, dja, git, jag.raman, jan.setjeeilers, kanth.ghatraju,
konrad.wilk, mbenatto, pfsmorigo, phcoder, pjones, ps,
ross.philipson
Hi,
It is our pleasure to inform you that we were able to achieve 0 outstanding
defects for the GRUB Coverity x86_64/EFI and ARM64/EFI runs. We did analysis
of 629 issues and fixed 535 of them. The rest has been dismissed mostly as
false positives. This work allowed us to improve overall GRUB code quality,
reliability and security. We will continue using the Coverity to verify
correctness of newly introduced code and existing one.
The Coverity analysis and fixing of reported issues was initiated by Andrei
Borzenkov in 2014. Later Vladimir Serbinenko joined and together continued this
work until 2017. We restarted using the Coverity analyzer in 2020, when we were
fixing BootHole security vulnerability and other issues. It took us 3 years to
do analysis of all Coverity issues not solved earlier. It was very tedious
process requiring hundreds of hours of code analysis done by many people. We
think it is important to name all, in alphabetical order, who tirelessly worked
to null out all defects reported by the Coverity:
- Alec Brown (Oracle),
- Alexey Makhalov (VMware),
- Andrei Borzenkov,
- Chris Coulson (Canonical),
- Daniel Axtens,
- Darren Kenny (Oracle),
- Glenn Washburn,
- Jagannathan Raman (Oracle),
- Jan Setje-Eilers (Oracle),
- Konrad Rzeszutek Wilk (Oracle),
- Marco A Benatto (Red Hat),
- Patrick Steinhardt,
- Paulo Flabiano Smorigo (Canonical),
- Ross Philipson (Oracle),
- Vladimir Serbinenko,
- WANG Xuerui.
Thank you for doing this work guys! This success would not be possible without you!
Daniel
_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects
2023-11-28 16:59 GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects Daniel Kiper
@ 2023-11-28 17:57 ` Darren Kenny
2023-12-01 17:06 ` Daniel Kiper
0 siblings, 1 reply; 3+ messages in thread
From: Darren Kenny @ 2023-11-28 17:57 UTC (permalink / raw)
To: Daniel Kiper, grub-devel
Cc: alec.r.brown, amakhalov, arvidjaar, chris.coulson, development,
dja, git, jag.raman, jan.setjeeilers, kanth.ghatraju, konrad.wilk,
mbenatto, pfsmorigo, phcoder, pjones, ps, ross.philipson
Hi Daniel,
Great to know the target was reached.
The last set of issues seemed to be a real challenge.
You set a high bar as a maintainer, encouraging everyone towards a
resolution and making GRUB all the better for it.
Well done all!
Thanks,
Darren.
On Tuesday, 2023-11-28 at 17:59:31 +01, Daniel Kiper wrote:
> Hi,
>
> It is our pleasure to inform you that we were able to achieve 0 outstanding
> defects for the GRUB Coverity x86_64/EFI and ARM64/EFI runs. We did analysis
> of 629 issues and fixed 535 of them. The rest has been dismissed mostly as
> false positives. This work allowed us to improve overall GRUB code quality,
> reliability and security. We will continue using the Coverity to verify
> correctness of newly introduced code and existing one.
>
> The Coverity analysis and fixing of reported issues was initiated by Andrei
> Borzenkov in 2014. Later Vladimir Serbinenko joined and together continued this
> work until 2017. We restarted using the Coverity analyzer in 2020, when we were
> fixing BootHole security vulnerability and other issues. It took us 3 years to
> do analysis of all Coverity issues not solved earlier. It was very tedious
> process requiring hundreds of hours of code analysis done by many people. We
> think it is important to name all, in alphabetical order, who tirelessly worked
> to null out all defects reported by the Coverity:
> - Alec Brown (Oracle),
> - Alexey Makhalov (VMware),
> - Andrei Borzenkov,
> - Chris Coulson (Canonical),
> - Daniel Axtens,
> - Darren Kenny (Oracle),
> - Glenn Washburn,
> - Jagannathan Raman (Oracle),
> - Jan Setje-Eilers (Oracle),
> - Konrad Rzeszutek Wilk (Oracle),
> - Marco A Benatto (Red Hat),
> - Patrick Steinhardt,
> - Paulo Flabiano Smorigo (Canonical),
> - Ross Philipson (Oracle),
> - Vladimir Serbinenko,
> - WANG Xuerui.
>
> Thank you for doing this work guys! This success would not be possible without you!
>
> Daniel
_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects
2023-11-28 17:57 ` Darren Kenny
@ 2023-12-01 17:06 ` Daniel Kiper
0 siblings, 0 replies; 3+ messages in thread
From: Daniel Kiper @ 2023-12-01 17:06 UTC (permalink / raw)
To: Darren Kenny
Cc: grub-devel, alec.r.brown, amakhalov, arvidjaar, chris.coulson,
development, dja, git, jag.raman, jan.setjeeilers, kanth.ghatraju,
konrad.wilk, mbenatto, pfsmorigo, phcoder, pjones, ps,
ross.philipson
On Tue, Nov 28, 2023 at 05:57:40PM +0000, Darren Kenny wrote:
>
> Hi Daniel,
>
> Great to know the target was reached.
>
> The last set of issues seemed to be a real challenge.
>
> You set a high bar as a maintainer, encouraging everyone towards a
> resolution and making GRUB all the better for it.
>
> Well done all!
Thank you!
Daniel
_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2023-12-01 17:06 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-11-28 16:59 GRUB Coverity x86_64/EFI and ARM64/EFI runs - 0 outstanding defects Daniel Kiper
2023-11-28 17:57 ` Darren Kenny
2023-12-01 17:06 ` Daniel Kiper
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.