Coverity project for GRUB

Coverity project for GRUB

[Andrei Borzenkov]

I set up Coverity project:
https://scan.coverity.com/projects/3406?tab=overview

There are quite a few of false positives caused by
grub_fshelp_find_file, but otherwise it does find real bugs. There are
slightly above 300 incidents in total.

I myself build it for i386-pc; if you have possibilities to submit
builds for other platforms would be great. We probably need some
agreement on how to name build versions.

Re: Coverity project for GRUB

[Vladimir 'φ-coder/phcoder' Serbinenko]

[-- Attachment #1: Type: text/plain, Size: 734 bytes --]

On 28.11.2014 20:47, Andrei Borzenkov wrote:
> I set up Coverity project:
> https://scan.coverity.com/projects/3406?tab=overview
> 
> There are quite a few of false positives caused by
> grub_fshelp_find_file, but otherwise it does find real bugs. There are
> slightly above 300 incidents in total.
> 
> I myself build it for i386-pc; if you have possibilities to submit
> builds for other platforms would be great. We probably need some
> agreement on how to name build versions.
> 
I was unable to access it. Could you post the list of warnings to the list?
> _______________________________________________
> Grub-devel mailing list
> Grub-devel@gnu.org
> https://lists.gnu.org/mailman/listinfo/grub-devel
> 



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 213 bytes --]

Re: Coverity project for GRUB

[Andrei Borzenkov]

On Mon, Dec 8, 2014 at 12:34 AM, Vladimir 'φ-coder/phcoder' Serbinenko
<phcoder@gmail.com> wrote:
> On 28.11.2014 20:47, Andrei Borzenkov wrote:
>> I set up Coverity project:
>> https://scan.coverity.com/projects/3406?tab=overview
>>
>> There are quite a few of false positives caused by
>> grub_fshelp_find_file, but otherwise it does find real bugs. There are
>> slightly above 300 incidents in total.
>>
>> I myself build it for i386-pc; if you have possibilities to submit
>> builds for other platforms would be great. We probably need some
>> agreement on how to name build versions.
>>
> I was unable to access it.

I think you need account. It accepts github credentials which I used;
otherwise you may need to sign up.

>                                        Could you post the list of warnings to the list?

Not sure if this will be that simple ... it provides rather
comprehensive GUI that explains why it thinks there is an error (with
back references to code etc). Simple issue export really lacks all of
this background.