From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wr1-f65.google.com (mail-wr1-f65.google.com [209.85.221.65]) by dpdk.org (Postfix) with ESMTP id D68C22C52 for ; Wed, 6 Mar 2019 16:27:34 +0100 (CET) Received: by mail-wr1-f65.google.com with SMTP id f14so13883968wrg.1 for ; Wed, 06 Mar 2019 07:27:34 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:content-transfer-encoding:user-agent:mime-version; bh=KVx0xXh6YxlKT0hbRHMg05heHKI6INxO95NxcTn7mb0=; b=EXWaO2qn6CVpDyjxvhZIp/d2lB6L39SUJs0kz3egRbYIwSgpxEkflnBsft6K61zV4l /dWNAxqd+kdQh8sPjxMeGWwBJTY7VdCh1V5jLqRfVW8Um4mTKbTX4rzptbsmEJOIGfOg Nk3ocfgoaencfyJKk2Is3dt3dJbzzDKFI5k1EIOHo3ABMEMEgQPYSx26/hq8kxJGy+H1 y9uA41gM9DN1cdXsc/RJnxgbairtjyLulFDk3W8inC0mEgwhJyBvaEIM7bFeY8MtEevZ igzjWqn5bDZlC40DZfUucW58KmqeCcjENWUplqrCadNY1XT06pq0qanyMtCfrEyMbdr8 VBjQ== X-Gm-Message-State: APjAAAXx8VPtrGT1dZ4ZqQmJkOdNy2CCP4T/ko0b0vRVykPE2pldT3Ao 2mkxJzg33QXk2mXdvlctMjM6q0DYJgY= X-Google-Smtp-Source: APXvYqzB7V8vWD1Sn8vyRgz5qfIXJBISSH+Ws2mYqexLzKtVxKHZ5J2Jg1lv2DPoB1XyObFaGU+BeQ== X-Received: by 2002:a5d:6846:: with SMTP id o6mr3302079wrw.160.1551886054014; Wed, 06 Mar 2019 07:27:34 -0800 (PST) Received: from localhost ([2a01:4b00:f419:6f00:b00c:66c8:99df:336]) by smtp.gmail.com with ESMTPSA id o14sm1034728wrp.34.2019.03.06.07.27.32 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 06 Mar 2019 07:27:32 -0800 (PST) Message-ID: From: Luca Boccassi To: dpdk-dev Cc: John McNamara , Thomas Monjalon , Ferruh Yigit Date: Wed, 06 Mar 2019 15:27:32 +0000 In-Reply-To: <3eff7705bf6958382a727d35f786469a83479b1c.camel@debian.org> References: <83259c98-9d32-02d8-fe09-d67839658eca@intel.com> <3eff7705bf6958382a727d35f786469a83479b1c.camel@debian.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.30.5-1 MIME-Version: 1.0 Subject: Re: [dpdk-dev] DPDK Release Status Meeting 21/2/2019 X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Mar 2019 15:27:35 -0000 On Thu, 2019-02-21 at 17:43 +0000, Luca Boccassi wrote: > On Thu, 2019-02-21 at 16:09 +0000, Ferruh Yigit wrote: > > Minutes 21 February 2019 > > ------------------------ >=20 > cut >=20 > > * Coverity is partially back, but new analyses aren't running > > * Looking for suggestions from the community for a better or more > > stable > > solutions >=20 > The clang-based alternative I mentioned that can be used from > Travis/Github is sonarcloud.io: >=20 > https://sonarcloud.io/ >=20 > Here's an example implementation: >=20 > https://github.com/zeromq/libzmq/commit/4d3516f634a4a5e3f522f5cb277da38b1= 88d32eb I've tested Sonarcloud, they are saying DPDK stinks (22000 code smells flagged) :-) https://sonarcloud.io/dashboard?id=3Dbluca_dpdk It seems the main "security" issues it highlights are the usage of sprintf, strcpy and strcat. They can probably be easily filtered out. The job on Travis takes about half an hour, so perhaps it's better as a weekly run. Integration is quite simple, based on the yet unmerged Travis patch: https://github.com/bluca/dpdk/commit/ef4f3c8bdc1b044e19d466efb9ba6fc0a3af42= 20 --=20 Kind regards, Luca Boccassi