X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=UTiQDNluWV43l6Meks2HiodsktDpJLJ6Cq6CdhaDpePD3yisAbIcd
	LgCzywpmYETMsxDuc09wLYiQ1WQybrAfRMGIqYv2x7J7h7CYecdJrwpEEJ0uoNtL
	ohOV3uTkQkuIoFyIpfvMJE8E8aPUTEUHKG2feGYmeDw+PJ4DXvFDSY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=oRwnx/GGvOEoeh9fUTb/zWR3qI4=; b=i///21D/tkU0uL+jl3vV4EaI6FQA
	b4RKpbVkX6NOaK3WPQvYXya8WOyz4uK1Rvknvuy561PU9giAfBUvA1Gkz59PNJJR
	WIwRfHnfecuP3X4BkycGlpVUxiL3iIsiBrtK7rOG/DGlkWko8SbFaggcW7w3d1w3
	u9l4lixZrqZr1qI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Mon, 19 May 2014 10:35:43 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Coverity Scan
Message-ID: <20140519083542.GB8756@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <5359F391 DOT 8060309 AT tiscali DOT co DOT uk> <20140425083500 DOT GA5666 AT calimero DOT vinschen DOT de> <20140425155324 DOT GA2412 AT ednor DOT casa DOT cgf DOT cx> <53766E46 DOT 4070207 AT tiscali DOT co DOT uk> <20140517101240 DOT GO430 AT calimero DOT vinschen DOT de> <5377CD8E DOT 1090501 AT tiscali DOT co DOT uk>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="/WwmFnJnmDyWGHa4"
Content-Disposition: inline
In-Reply-To: <5377CD8E.1090501@tiscali.co.uk>
User-Agent: Mutt/1.5.23 (2014-03-12)

--/WwmFnJnmDyWGHa4
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On May 17 21:58, David Stacey wrote:
> On 17/05/14 11:12, Corinna Vinschen wrote:
> >On May 16 21:00, David Stacey wrote:
> >>OK - we're in! You can find our project page at
> >>https://scan.coverity.com/projects/2250. Off the list, I've sent e-mails
> >>to Corinna and CGF inviting them to join the project ;-)
> >I got no such mail.  You didn't try the account I'm using for the
> >mailing list, I hope?  Please use my company address vinschen AT
> >redhat DOT com.
>=20
> Apologies - another invitation sent to the correct e-mail address. Further
> apologies if I should have known your correct e-mail address already!
>=20
> >I have no idea how this works. I had hoped I'd just get emails with the
> >scan results, the less fancy the solution, the better. We can set this up
> >using gpg encrypted mails, that would be the most elegant solution, IMHO.
>=20
> I could probably get Coverity Scan to ping you an e-mail if a new defect =
is
> introduced. It's probably best if you look at the web page above. Once you
> accept the invitation and log in, you'll see a button to view the defects.
> For each defect, you'll see the defect itself, along with the path that t=
he
> analysis engine took to get there.
> [...]
> >Well, the problem is that we're going to switch to git pretty soon, and
> >that will slightly change the directory layout.  But basically, in the
> >winsup dir, you see the subdirs
> >
> >   cygserver
> >   cygwin
> >   doc
> >   lsaauth
> >   testsuite
> >   utils
> >
> >Of those you can ignore
> >
> >   doc
> >   testsuite
> >
> >The other four would be natural groups, I think.  The toplevel and
> >winsup dirs don't need to be scanned either.
>=20
> I've set up components for cygserver, cygwin, utils and newlib. There were
> no defects found in 'lsaauth' (which needs investigation in itself - I'll
> look at this).

A single source file.  Not much code.  There is at least *some*
non-0 probability that the code might be correct... I hope.

> If our directory structure is going to change when we move to
> git then that is OK - I'll remap the components at the point we move.
> However, be aware that reorganising things can confuse Coverity - if you
> sign off any warnings as 'won't fix' then they may reappear if the offend=
ing
> code is moved into a different class or file.

That's to be expected.

> >You are aware that we need a copyright assignment from you if you'd like
> >to provide patches, right? Please have a look at the "Before you get
> >started" section of http://cygwin.com/contrib.html
>=20
> I'll limit my patches to the trivial kind that are ten lines or less. My
> present employer is amazingly supportive of the open source work that I do
> in my own time, and that boat doesn't need rocking.

Nevertheless, I'd be glad if you try.  This project is in desperate need
of developers getting their hands dirty.

> >In theory, at the time of writing this, I'd suggest to include only cgf,
> >yaakov, and me.
>=20
> I've sent an invitation to Yaakov also.

Thanks!  For the time being I already marked a single reported problem
as false positive.  I look into more at some later point.  I'll first
try to get a 1.7.29-3 with a few bugfixes out of the door.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--/WwmFnJnmDyWGHa4
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=aXSK
-----END PGP SIGNATURE-----

--/WwmFnJnmDyWGHa4--