Re: New Coverity run?
Thomas Shinnick <[email protected]>
| Newsgroups | gmane.comp.fonts.fontforge.devel |
|---|---|
| Message-ID | <CAEfS-pgH9gHKNdRo2jSj4tGrSB_FgW0gNC_W2UW+Fkm9TnnC_g@mail.gmail.com> |
Very cool, thank you @joescat
New Coverity report available Sep 04, 2014 Last Analyzed
https://scan.coverity.com/projects/792?tab=overview
What is quite neat is that it looks like adding the Coverity annotation
fontforge/scripting.c
231 /* coverity[+kill] */
232 static void traceback(Context *c) {
really did work and got rid of a *lot* of "uninitialized variable" warnings
in scripting.c, as it now understands that that routine and ones derived
from it don't fall through but terminate, so following code won't see
variables that weren't initialized by the erroring path.
Defect changes since previous build dated Aug 12, 2014
21 Newly detected
*94 Eliminated*
Defects by status for current build
2,165 Total defects
1,616 Outstanding
6 Dismissed
543 Fixed
Here is the mix of instructions from @joescat and the Coverity page at
https://scan.coverity.com/download :
that I used to build the analysis to submit to Coverity.
Retrieve Coverity's build for your system from that downloads page, in my
case
https://scan.coverity.com/download/cxx/linux-64
which downloaded
cov-analysis-linux64-7.5.0.tar.gz
-rwx------ 1 327337248 Sep 4 21:13 cov-analysis-linux64-7.5.0.tar.gz
Unpack their tarball
tar xvzf cov-analysis-linux64-7.5.0.tar.gz
which resulted in the Coverity bin/ and other subdirectories under
752M ./cov-analysis-linux64-7.5.0
Then I did
git clone [email protected]:fontforge/fontforge.git fontforge-master
cd fontforge-master
./bootstrap >do_bootstrap.01 2>&1
CFLAGS="-g -O0" PYTHON=python3 ./configure --prefix="$HOME/local"
>do_conf.01 2>&1
export COV_HOME=/home/tom/Releases/cov-analysis-linux64-7.5.0
export PATH=$COV_HOME/bin:$PATH
cov-build --dir cov-int make >do_cov_make.01 2>&1
Peeking in the last listing I saw at the end
> make[1]: Leaving directory
`/home/tom/study/fonts/FF/fontforge-master'
> 630 C/C++ compilation units (100%) are ready for analysis
> The cov-build utility completed successfully.
which looked like happiness.
74M ./cov-int
I created the tarball to submit
-rw-rw-r-- 1 37726706 Sep 4 22:33 fontforge_20140904.tgz
and submitted through their page at
https://scan.coverity.com/projects/792/builds/new
using made up version and tag
Version Fontforge master 20140904
Tag commit 9e9467c020
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
fontforge-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fontforge-devel
http://fontforge.10959.n7.nabble.com/Developer-f3.html