xref: /third_party/python/Misc/README.coverity (revision 7db96d56)
17db96d56Sopenharmony_ci
27db96d56Sopenharmony_ciCoverity has a static analysis tool (Prevent) which is similar to Klocwork.
37db96d56Sopenharmony_ciThey run their tool on the Python source code (SVN head) on a daily basis.
47db96d56Sopenharmony_ciThe results are available at:
57db96d56Sopenharmony_ci
67db96d56Sopenharmony_ci     http://scan.coverity.com/
77db96d56Sopenharmony_ci
87db96d56Sopenharmony_ciAbout 20 people have access to the analysis reports.  Other
97db96d56Sopenharmony_cipeople can be added by request.
107db96d56Sopenharmony_ci
117db96d56Sopenharmony_ciPrevent was first run on the Python 2.5 source code in March 2006.
127db96d56Sopenharmony_ciThere were originally about 100 defects reported.  Some of these
137db96d56Sopenharmony_ciwere false positives.  Over 70 issues were uncovered.
147db96d56Sopenharmony_ci
157db96d56Sopenharmony_ciEach warning has a unique id and comments that can be made on it.
167db96d56Sopenharmony_ciWhen checking in changes due to a warning, the unique id
177db96d56Sopenharmony_cias reported by the tool was added to the SVN commit message.
187db96d56Sopenharmony_ci
197db96d56Sopenharmony_ciFalse positives were annotated so that the comments can
207db96d56Sopenharmony_cibe reviewed and reversed if the analysis was incorrect.
217db96d56Sopenharmony_ci
227db96d56Sopenharmony_ciContact python-dev@python.org for more information.
23