LWN.net recently had an article about Dr Checker. It's a promising new static analysis tool. The LWN article is for subscribers only until tomorrow, but anyone can read the PDF or install the code. It would be really interesting if someone could run Dr Checker on a mainline kernel tree and post the results. https://lwn.net/Articles/733056/ https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-machiry.pdf https://github.com/ucsb-seclab/dr_checker/ The other tool that's quite interesting is KINT which looks for integer overflows. It's a bit of a pain because you have to annotate some kernel functions to make it work. The PDF and source code are here: http://css.csail.mit.edu/kint/ regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
