scan.coverity.com

[Jerry James]

2009/2/20 Vladimir G. Ivanovic <vgivanovic at comcast.net>:
> Coverity, under contract to the US Department of Homeland Security
> (DHS), has scanned over 2,500 open source projects for defects using
> their (proprietary) automated defect detection technology.
>
> GNU Emacs is one of the projects that they've scanned and has advanced
> to Rung 1 and is apparently fixing bugs discovered by the Coverity
> scanning.
>
> I'd like to see XEmacs included in this effort, and I volunteer being
> the XEmacs point of contact, the person responsible for submitting
> releases to be scanned and for filing the resulting bug reports.
>
> More info: http://scan.coverity.com/index.html
>
> Comments?
>
> --- Vladimir

Over the summer of 2006, I had the opportunity to use several source
code scanners that were licensed by the lab I was visiting.  I took
the opportunity to run them over the XEmacs code base at that time.
If you look at the ChangeLogs for that summer, you'll see I did a
bunch of bug fixing.  I never addressed all of the issues those
scanners found, and some of the scanner versions were old even then.
I was impressed with the subtlety of the bugs those scanners turned
up.  I think this would be really great.  Go for it!
-- 
Jerry James
http://loganjerry.googlepages.com/