Re: Flaws detected by static analyzers in Fedora 41 Critical Path Packages

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jul 09, 2024 at 01:37:20PM +0200, Siteshwar Vashisht wrote:
> I request somebody from the tools team to comment on these concerns. We only
> report the defects identified by gcc, clang etc.

You wrote:

  > TLDR: This report[2] contains 73976 identified defects.

and again above said they were "defects".  Well, we know the ones in
libvirt & QEMU are nearly all NOT defects, so don't use that word.

  > Please review the report and provide feedback.

At 1 minute to look at each report, working 8 hours a day, that would
take 154 working days.

Constructively I would suggest YOU doing the following:

(1) Examine a subset of the reports yourself.

(2) Identity systematic issues, such as the attribute((cleanup)) issue
that Dan pointed out, and work with the upstream toolchain to get
those fixed (apparently the attribute((cleanup)) issue is / will be
fixed already, so that's good).

(3) If during this search you find what you think is an actual defect,
file a bug with the upstream package.

(4) Repeat steps (1)..(3) until the list is much, much smaller.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html

-- 
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux