Re: Coverity and Wine (was: re: Adding Flawfinder to Patchwatcher)

[Paul Vriens]

Dan Kegel wrote:
> Jason wrote:
> > I'm pretty sure Coverity's tool, Prevent, costs money to buy.
> > IIRC if the maintainers of an OSS project ask them to,
> > they will set their http://scan.coverity.com server to
> > run a scan on that project's code and upload
> > the scan results to the web at no charge
>
> And they in fact do this for Wine.  We've fixed a number
> of issues it found, see e.g.
> http://marc.info/?l=wine-patches&w=2&r=1&s=coverity&q=b
> There are lots more to fix.
>
> The last scan they did was in late May, though.  They
> say they migrated to new servers and have been
> slowly bringing up all the OSS scans again.
> They haven't given a target date for having Wine's scan back online yet.
> - Dan

Or http://source.winehq.org/git/wine.git/?a=search&st=commit&s=coverity...