Csound Csound-dev Csound-tekno Search About

[Cs-dev] Where are we with the coverity checks?

Date2014-02-04 13:36
Fromjohn ffitch
Subject[Cs-dev] Where are we with the coverity checks?
How close are we to closing/rechecking?  I am aware that dssi4cs.c is
a mess but are there others we need to fix?
==John ffitch

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2014-02-04 13:43
FromFelipe Sateler
SubjectRe: [Cs-dev] Where are we with the coverity checks?
I can do another test build if that is desired.

On Tue, Feb 4, 2014 at 10:36 AM, john ffitch  wrote:
> How close are we to closing/rechecking?  I am aware that dssi4cs.c is
> a mess but are there others we need to fix?
> ==John ffitch
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel



-- 

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2014-02-04 13:54
FromVictor Lazzarini
SubjectRe: [Cs-dev] Where are we with the coverity checks?
I would prefer to see all the outstanding C++ errors dealt with before you do. 

The other question I would have is whether all the false positives and the 
issues in autogenerated code are going to be detected again, or the system will
take our annotations onboard?

Victor
On 4 Feb 2014, at 13:43, Felipe Sateler  wrote:

> I can do another test build if that is desired.
> 
> On Tue, Feb 4, 2014 at 10:36 AM, john ffitch  wrote:
>> How close are we to closing/rechecking?  I am aware that dssi4cs.c is
>> a mess but are there others we need to fix?
>> ==John ffitch
>> 
>> ------------------------------------------------------------------------------
>> Managing the Performance of Cloud-Based Applications
>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> Read the Whitepaper.
>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
> 
> 
> 
> -- 
> 
> Saludos,
> Felipe Sateler
> 
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel


------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2014-02-04 14:39
FromFelipe Sateler
SubjectRe: [Cs-dev] Where are we with the coverity checks?
OK, I will wait then.

Coverity has a tool called a modeling file, which is designed to
prevent false positives. I'm currently investigating it, but
apparently it is just a c file which redefines functions based on some
defined coverity primitives.

The python project has a modeling file that may be useful for the
python wrappers, which produce a lot of false positives[1].
Alternatively, we could just ignore the interfaces directory.


[1] https://bitbucket.org/mirror/cpython/src/ccbe2132392b180a082c75789f38afb4174f6cb3/Misc/coverity_model.c?at=default


On Tue, Feb 4, 2014 at 10:54 AM, Victor Lazzarini
 wrote:
> I would prefer to see all the outstanding C++ errors dealt with before you do.
>
> The other question I would have is whether all the false positives and the
> issues in autogenerated code are going to be detected again, or the system will
> take our annotations onboard?
>
> Victor
> On 4 Feb 2014, at 13:43, Felipe Sateler  wrote:
>
>> I can do another test build if that is desired.
>>
>> On Tue, Feb 4, 2014 at 10:36 AM, john ffitch  wrote:
>>> How close are we to closing/rechecking?  I am aware that dssi4cs.c is
>>> a mess but are there others we need to fix?
>>> ==John ffitch
>>>
>>> ------------------------------------------------------------------------------
>>> Managing the Performance of Cloud-Based Applications
>>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>>> Read the Whitepaper.
>>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Csound-devel mailing list
>>> Csound-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>>
>>
>>
>> --
>>
>> Saludos,
>> Felipe Sateler
>>
>> ------------------------------------------------------------------------------
>> Managing the Performance of Cloud-Based Applications
>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> Read the Whitepaper.
>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel



-- 

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2014-02-04 14:58
FromMichael Gogins
SubjectRe: [Cs-dev] Where are we with the coverity checks?
AttachmentsNone  None  
Can we ignore not the interfaces directory, but only the generated files? As far as I can see that would be the best solution.

Regards,
Mike


-----------------------------------------------------
Michael Gogins
Irreducible Productions
http://michaelgogins.tumblr.com
Michael dot Gogins at gmail dot com


On Tue, Feb 4, 2014 at 9:39 AM, Felipe Sateler <fsateler@gmail.com> wrote:
OK, I will wait then.

Coverity has a tool called a modeling file, which is designed to
prevent false positives. I'm currently investigating it, but
apparently it is just a c file which redefines functions based on some
defined coverity primitives.

The python project has a modeling file that may be useful for the
python wrappers, which produce a lot of false positives[1].
Alternatively, we could just ignore the interfaces directory.


[1] https://bitbucket.org/mirror/cpython/src/ccbe2132392b180a082c75789f38afb4174f6cb3/Misc/coverity_model.c?at=default


On Tue, Feb 4, 2014 at 10:54 AM, Victor Lazzarini
<Victor.Lazzarini@nuim.ie> wrote:
> I would prefer to see all the outstanding C++ errors dealt with before you do.
>
> The other question I would have is whether all the false positives and the
> issues in autogenerated code are going to be detected again, or the system will
> take our annotations onboard?
>
> Victor
> On 4 Feb 2014, at 13:43, Felipe Sateler <fsateler@gmail.com> wrote:
>
>> I can do another test build if that is desired.
>>
>> On Tue, Feb 4, 2014 at 10:36 AM, john ffitch <jpff@codemist.co.uk> wrote:
>>> How close are we to closing/rechecking?  I am aware that dssi4cs.c is
>>> a mess but are there others we need to fix?
>>> ==John ffitch
>>>
>>> ------------------------------------------------------------------------------
>>> Managing the Performance of Cloud-Based Applications
>>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>>> Read the Whitepaper.
>>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Csound-devel mailing list
>>> Csound-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>>
>>
>>
>> --
>>
>> Saludos,
>> Felipe Sateler
>>
>> ------------------------------------------------------------------------------
>> Managing the Performance of Cloud-Based Applications
>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> Read the Whitepaper.
>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel



--

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/csound-devel


Date2014-02-04 15:10
FromFelipe Sateler
SubjectRe: [Cs-dev] Where are we with the coverity checks?
Yes, one can specify "components" via a file glob pattern, and then
choose to ignore whole components.

On Tue, Feb 4, 2014 at 11:58 AM, Michael Gogins
 wrote:
> Can we ignore not the interfaces directory, but only the generated files? As
> far as I can see that would be the best solution.
>
> Regards,
> Mike
>
>
> -----------------------------------------------------
> Michael Gogins
> Irreducible Productions
> http://michaelgogins.tumblr.com
> Michael dot Gogins at gmail dot com
>
>
> On Tue, Feb 4, 2014 at 9:39 AM, Felipe Sateler  wrote:
>>
>> OK, I will wait then.
>>
>> Coverity has a tool called a modeling file, which is designed to
>> prevent false positives. I'm currently investigating it, but
>> apparently it is just a c file which redefines functions based on some
>> defined coverity primitives.
>>
>> The python project has a modeling file that may be useful for the
>> python wrappers, which produce a lot of false positives[1].
>> Alternatively, we could just ignore the interfaces directory.
>>
>>
>> [1]
>> https://bitbucket.org/mirror/cpython/src/ccbe2132392b180a082c75789f38afb4174f6cb3/Misc/coverity_model.c?at=default
>>
>>
>> On Tue, Feb 4, 2014 at 10:54 AM, Victor Lazzarini
>>  wrote:
>> > I would prefer to see all the outstanding C++ errors dealt with before
>> > you do.
>> >
>> > The other question I would have is whether all the false positives and
>> > the
>> > issues in autogenerated code are going to be detected again, or the
>> > system will
>> > take our annotations onboard?
>> >
>> > Victor
>> > On 4 Feb 2014, at 13:43, Felipe Sateler  wrote:
>> >
>> >> I can do another test build if that is desired.
>> >>
>> >> On Tue, Feb 4, 2014 at 10:36 AM, john ffitch 
>> >> wrote:
>> >>> How close are we to closing/rechecking?  I am aware that dssi4cs.c is
>> >>> a mess but are there others we need to fix?
>> >>> ==John ffitch
>> >>>
>> >>>
>> >>> ------------------------------------------------------------------------------
>> >>> Managing the Performance of Cloud-Based Applications
>> >>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> >>> Read the Whitepaper.
>> >>>
>> >>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> >>> _______________________________________________
>> >>> Csound-devel mailing list
>> >>> Csound-devel@lists.sourceforge.net
>> >>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>> >>
>> >>
>> >>
>> >> --
>> >>
>> >> Saludos,
>> >> Felipe Sateler
>> >>
>> >>
>> >> ------------------------------------------------------------------------------
>> >> Managing the Performance of Cloud-Based Applications
>> >> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> >> Read the Whitepaper.
>> >>
>> >> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> >> _______________________________________________
>> >> Csound-devel mailing list
>> >> Csound-devel@lists.sourceforge.net
>> >> https://lists.sourceforge.net/lists/listinfo/csound-devel
>> >
>> >
>> >
>> > ------------------------------------------------------------------------------
>> > Managing the Performance of Cloud-Based Applications
>> > Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> > Read the Whitepaper.
>> >
>> > http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> > _______________________________________________
>> > Csound-devel mailing list
>> > Csound-devel@lists.sourceforge.net
>> > https://lists.sourceforge.net/lists/listinfo/csound-devel
>>
>>
>>
>> --
>>
>> Saludos,
>> Felipe Sateler
>>
>>
>> ------------------------------------------------------------------------------
>> Managing the Performance of Cloud-Based Applications
>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> Read the Whitepaper.
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>
>
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel
>



-- 

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net