Re: [Ksummit-discuss] coverity, static checking etc.

[josh@joshtriplett.org]

On Fri, May 09, 2014 at 01:07:09PM -0400, Dave Jones wrote:
> I gave a lightning talk on this last year. This year I have a bit more data
> so could probably fill a whole session.
> 
> Last year I had been doing the coverity scans on an almost daily basis
> for 2-3 months.  Now that we're a year in, I'd like to share some
> results, and show some of the more common trends and bug patterns that
> seem to pop up.
> 
> [ spoiler: For the most part, it's all pretty positive, but we still suck ]
> 
> It would also be good to have some more discussion about other tools
> we could be making more use of.  (Nomination: Dan Carpenter for smatch).

I'd like to see this topic as well.  I think we could do a lot better
here than we do.  And don't forget that GCC is one of our top static
analysis tools, if only because it's the only one *everyone* runs; that
includes both warnings and the possibility of shipping and building our
own GCC plugin.

I'd also like to nominate Christopher Li, for Sparse.

- Josh Triplett