From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5485 invoked by alias); 19 May 2014 08:35:49 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 5467 invoked by uid 89); 19 May 2014 08:35:48 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2 X-HELO: calimero.vinschen.de Received: from aquarius.hirmke.de (HELO calimero.vinschen.de) (217.91.18.234) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 19 May 2014 08:35:47 +0000 Received: by calimero.vinschen.de (Postfix, from userid 500) id 070838E1572; Mon, 19 May 2014 10:35:43 +0200 (CEST) Date: Mon, 19 May 2014 08:36:00 -0000 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Coverity Scan Message-ID: <20140519083542.GB8756@calimero.vinschen.de> Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com References: <5359F391.8060309@tiscali.co.uk> <20140425083500.GA5666@calimero.vinschen.de> <20140425155324.GA2412@ednor.casa.cgf.cx> <53766E46.4070207@tiscali.co.uk> <20140517101240.GO430@calimero.vinschen.de> <5377CD8E.1090501@tiscali.co.uk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="/WwmFnJnmDyWGHa4" Content-Disposition: inline In-Reply-To: <5377CD8E.1090501@tiscali.co.uk> User-Agent: Mutt/1.5.23 (2014-03-12) X-SW-Source: 2014-05/txt/msg00394.txt.bz2 --/WwmFnJnmDyWGHa4 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 3375 On May 17 21:58, David Stacey wrote: > On 17/05/14 11:12, Corinna Vinschen wrote: > >On May 16 21:00, David Stacey wrote: > >>OK - we're in! You can find our project page at > >>https://scan.coverity.com/projects/2250. Off the list, I've sent e-mails > >>to Corinna and CGF inviting them to join the project ;-) > >I got no such mail. You didn't try the account I'm using for the > >mailing list, I hope? Please use my company address vinschen AT > >redhat DOT com. >=20 > Apologies - another invitation sent to the correct e-mail address. Further > apologies if I should have known your correct e-mail address already! >=20 > >I have no idea how this works. I had hoped I'd just get emails with the > >scan results, the less fancy the solution, the better. We can set this up > >using gpg encrypted mails, that would be the most elegant solution, IMHO. >=20 > I could probably get Coverity Scan to ping you an e-mail if a new defect = is > introduced. It's probably best if you look at the web page above. Once you > accept the invitation and log in, you'll see a button to view the defects. > For each defect, you'll see the defect itself, along with the path that t= he > analysis engine took to get there. > [...] > >Well, the problem is that we're going to switch to git pretty soon, and > >that will slightly change the directory layout. But basically, in the > >winsup dir, you see the subdirs > > > > cygserver > > cygwin > > doc > > lsaauth > > testsuite > > utils > > > >Of those you can ignore > > > > doc > > testsuite > > > >The other four would be natural groups, I think. The toplevel and > >winsup dirs don't need to be scanned either. >=20 > I've set up components for cygserver, cygwin, utils and newlib. There were > no defects found in 'lsaauth' (which needs investigation in itself - I'll > look at this). A single source file. Not much code. There is at least *some* non-0 probability that the code might be correct... I hope. > If our directory structure is going to change when we move to > git then that is OK - I'll remap the components at the point we move. > However, be aware that reorganising things can confuse Coverity - if you > sign off any warnings as 'won't fix' then they may reappear if the offend= ing > code is moved into a different class or file. That's to be expected. > >You are aware that we need a copyright assignment from you if you'd like > >to provide patches, right? Please have a look at the "Before you get > >started" section of http://cygwin.com/contrib.html >=20 > I'll limit my patches to the trivial kind that are ten lines or less. My > present employer is amazingly supportive of the open source work that I do > in my own time, and that boat doesn't need rocking. Nevertheless, I'd be glad if you try. This project is in desperate need of developers getting their hands dirty. > >In theory, at the time of writing this, I'd suggest to include only cgf, > >yaakov, and me. >=20 > I've sent an invitation to Yaakov also. Thanks! For the time being I already marked a single reported problem as false positive. I look into more at some later point. I'll first try to get a 1.7.29-3 with a few bugfixes out of the door. Thanks, Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --/WwmFnJnmDyWGHa4 Content-Type: application/pgp-signature Content-length: 819 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTecJeAAoJEPU2Bp2uRE+gORIP/3UcvtbaYQNnl9AYVryrQKvV XwGf2JN12Rc5EmH3bWZioHfCBnDD+JJb3dDO/uVTjyrxJ4KJp/wEyMeSwP/z12W+ btS+iM0uRfmz/N4CvSOH0ZG77hgNhU4aQnGegP1Apo9XssqF4uPD1Yg6kLmUwHyM OIUEYOpRKKcJyNuhMOGux6iFBRAAXk6pqnhgrGQDWD1nBNIlTCUcqxyVHo6Ct0oy DtpPYqeGABXrXOLeqVlvQvPreYYUcSbjcDU44N9Bs4shQ2bwpc+FOvy0N0NnWQi4 MQ866ZjcxkCRuZ0p8Y8dexGINeZuePF61jfbVdX55LAHswcleC9d/ALjYbPnNkMn xUPJEWcH+zarhJRmaMfjGyNB53v3HpR+AiZf0r8XbWudvW1DXEQ45ORYEieRImaZ LmBHPOwomN93AT43bxRE4OM7vXPEMOlO5znLk96xH9JtCaHbkAK3ZzL1e66kfaor 9HDlxnryKDKW2nv7T8GG7ScKS2IB/IYNV9nRyOEFecOQwl2nD72Ff868/tQMR0bk 45tpH40NChlnCbtfMoorZyI4D0y4vs2PhG2kSRX3/akwv/KJXB0KHO3GRRbtFCwp 6lBRbNJCwi08FHsblTq7o5Y6Hi0W0AgUnV6UDCZ2QcWdAJKeD6rvajprFyeWFwv9 JlGuI/W1NRN74VE3KOMr =aXSK -----END PGP SIGNATURE----- --/WwmFnJnmDyWGHa4--