Re: New Coverity run?

Thomas Shinnick <[email protected]>
Newsgroups gmane.comp.fonts.fontforge.devel
Message-ID <CAEfS-pgH9gHKNdRo2jSj4tGrSB_FgW0gNC_W2UW+Fkm9TnnC_g@mail.gmail.com>
Very cool, thank you @joescat

New Coverity report available   Sep 04, 2014  Last Analyzed
    https://scan.coverity.com/projects/792?tab=overview

What is quite neat is that it looks like adding the Coverity annotation
      fontforge/scripting.c
          231 /* coverity[+kill] */
          232 static void traceback(Context *c) {
really did work and got rid of a *lot* of "uninitialized variable" warnings
in scripting.c, as it now understands that that routine and ones derived
from it don't fall through but terminate, so following code won't see
variables that weren't initialized by the erroring path.

    Defect changes since previous build dated Aug 12, 2014
        21 Newly detected
        *94 Eliminated*

    Defects by status for current build
        2,165 Total defects
        1,616 Outstanding
            6 Dismissed
          543 Fixed


Here is the mix of instructions from @joescat and the Coverity page at
      https://scan.coverity.com/download :
that I used to build the analysis to submit to Coverity.

Retrieve Coverity's build for your system from that downloads page, in my
case
      https://scan.coverity.com/download/cxx/linux-64
which downloaded
      cov-analysis-linux64-7.5.0.tar.gz
      -rwx------  1 327337248 Sep  4 21:13 cov-analysis-linux64-7.5.0.tar.gz

Unpack their tarball
      tar xvzf cov-analysis-linux64-7.5.0.tar.gz
which resulted in the Coverity bin/ and other subdirectories under
      752M    ./cov-analysis-linux64-7.5.0

Then I did
    git clone [email protected]:fontforge/fontforge.git fontforge-master
    cd fontforge-master
    ./bootstrap   >do_bootstrap.01 2>&1
    CFLAGS="-g -O0" PYTHON=python3 ./configure --prefix="$HOME/local"
>do_conf.01 2>&1

    export COV_HOME=/home/tom/Releases/cov-analysis-linux64-7.5.0
    export PATH=$COV_HOME/bin:$PATH
    cov-build --dir cov-int make      >do_cov_make.01 2>&1

Peeking in the last listing I saw at the end
        > make[1]: Leaving directory
`/home/tom/study/fonts/FF/fontforge-master'
        > 630 C/C++ compilation units (100%) are ready for analysis
        > The cov-build utility completed successfully.
which looked like happiness.
      74M     ./cov-int

I created the tarball to submit

    -rw-rw-r--  1 37726706 Sep  4 22:33 fontforge_20140904.tgz
and submitted through their page at
    https://scan.coverity.com/projects/792/builds/new
using made up version and tag
        Version   Fontforge master 20140904
        Tag       commit 9e9467c020

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/

_______________________________________________
fontforge-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fontforge-devel
http://fontforge.10959.n7.nabble.com/Developer-f3.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.