From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTP id EA5A170A for ; Fri, 9 May 2014 21:39:24 +0000 (UTC) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.187]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id 421D3201C4 for ; Fri, 9 May 2014 21:39:24 +0000 (UTC) From: Arnd Bergmann To: Dave Jones Date: Fri, 09 May 2014 23:39:20 +0200 Message-ID: <4270240.hn6Z0r0DnB@wuerfel> In-Reply-To: <20140509203307.GA20593@redhat.com> References: <20140509170709.GA9747@redhat.com> <5857276.jy6b86PZuN@wuerfel> <20140509203307.GA20593@redhat.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Cc: ksummit-discuss@lists.linuxfoundation.org Subject: Re: [Ksummit-discuss] coverity, static checking etc. List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Friday 09 May 2014 16:33:07 Dave Jones wrote: > On Fri, May 09, 2014 at 10:18:40PM +0200, Arnd Bergmann wrote: > > On Friday 09 May 2014 13:07:09 Dave Jones wrote: > > > I gave a lightning talk on this last year. This year I have a bit more data > > > so could probably fill a whole session. > > > > > > Last year I had been doing the coverity scans on an almost daily basis > > > for 2-3 months. Now that we're a year in, I'd like to share some > > > results, and show some of the more common trends and bug patterns that > > > seem to pop up. > > > > > > [ spoiler: For the most part, it's all pretty positive, but we still suck ] > > > > > > It would also be good to have some more discussion about other tools > > > we could be making more use of. (Nomination: Dan Carpenter for smatch). > > > > I'd be interested in this. One thing I'd been meaning to ask you about > > for ages is what I can do to get scan results for ARM (or any other > > architecture for that matter) specific code. We have a lot of that these > > days, and as I understand it, the results on the public website are just > > for x86 builds. > > yeah, right now their tool (definitely front-end, but back-end too iirc) > is x86 only. So unless it's something that CONFIG_COMPILE_TEST would pick up, > it's not going to be in the scans. I have in the past successfully built architecture ports with the wrong compiler by just removing all the inline assembly and slightly tweaking the command line, for the purpose of review. I'd assume I could do the same here, but I haven't figured out if there is a way for me to actually get the tool so I can run it on my own machine. When I signed for an account up last year, I only tried joining the "Linux" project. Maybe I need to add another git tree that is configured for building an ARM kernel? Arnd