/Misc/README.coverity

http://unladen-swallow.googlecode.com/ · Unknown · 22 lines · 15 code · 7 blank · 0 comment · 0 complexity · d7389af3f04d6bbd1d675da93476f249 MD5 · raw file 

    

  1. Coverity has a static analysis tool (Prevent) which is similar to Klocwork.
    2. 

  2. They run their tool on the Python source code (SVN head) on a daily basis.
    3. 

  3. The results are available at:
    4. 

  4. 

  5.      http://scan.coverity.com/
    6. 

  6. 

  7. About 20 people have access to the analysis reports.  Other
    8. 

  8. people can be added by request.
    9. 

  9. 

  10. Prevent was first run on the Python 2.5 source code in March 2006.
    11. 

  11. There were originally about 100 defects reported.  Some of these
    12. 

  12. were false positives.  Over 70 issues were uncovered.
    13. 

  13. 

  14. Each warning has a unique id and comments that can be made on it.
    15. 

  15. When checking in changes due to a warning, the unique id
    16. 

  16. as reported by the tool was added to the SVN commit message.
    17. 

  17. 

  18. False positives were annotated so that the comments can
    19. 

  19. be reviewed and reversed if the analysis was incorrect.
    20. 

  20. 

  21. Contact python-dev@python.org for more information.
    22.