Static code analyse of the libical library
Allen Winter
winter at kde.org
Mon Jun 6 07:25:51 PDT 2016
On Monday, June 06, 2016 10:06:44 AM Milan Crha wrote:
> On Sat, 2016-06-04 at 12:21 -0400, Allen Winter wrote:
> > I just ran Coverity on the glib branch.
> > You can see the results here -> https://scan.coverity.com/projects/li
> > bical-libical/view_defects
>
> Hi,
> I ran the scan on the glib branch at commit
> 13b48609e38bdadfdb9c5657b32a4fea0c46eb91 with the patch from [1]
> applied and the result can be found here [2] (I'm sorry, I do not have
> a publicly accessible address for those results, thus I copied it
> elsewhere). You can see at the bottom of [2] what tools were run on it
> and in which versions. The summary of the detected issues and
> suggestions [3] is slightly longer than the single Coverity Scan, it
> counts down to defect #238. On the other hand, as I mentioned earlier,
> there can be false positives.
nice report. good to have all the issues in one report.
now we just need to fix them all :)
> Bye,
> Milan
>
> [1] http://lists.infradead.org/pipermail/libical-devel/2016-June/000710.html
> [2] https://people.gnome.org/~mcrha/libical/glib-branch-20160606.html
> [3] Summary of the detected issues and suggestions:
> 1 ARRAY_VS_SINGLETON
> 2 CHAR_IO
> 4 CHECKED_RETURN
> 61 CLANG_WARNING
> 9 CPPCHECK_WARNING
> 6 DC.WEAK_CRYPTO
> 4 DEADCODE
> 13 FORWARD_NULL
> 1 IDENTIFIER_TYPO
> 1 MISSING_BREAK
> 1 NEGATIVE_RETURNS
> 4 NULL_RETURNS
> 3 OVERRUN
> 19 PASS_BY_VALUE
> 88 RESOURCE_LEAK
> 6 REVERSE_INULL
> 7 TAINTED_SCALAR
> 1 TOCTOU
> 4 UNINIT
> 3 USE_AFTER_FREE
>
>
> _______________________________________________
> libical-devel mailing list
> libical-devel at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/libical-devel
More information about the libical-devel
mailing list