mirror of https://github.com/python/cpython
23 lines
845 B
Plaintext
23 lines
845 B
Plaintext
|
|
||
|
|
Coverity has a static analysis tool (Prevent) which is similar to Klocwork.
|
||
|
|
They run their tool on the Python source code (SVN head) on a daily basis.
|
||
|
|
The results are available at:
|
||
|
|
|
||
|
|
http://scan.coverity.com/
|
||
|
|
|
||
|
|
About 20 people have access to the analysis reports. Other
|
||
|
|
people can be added by request.
|
||
|
|
|
||
|
|
Prevent was first run on the Python 2.5 source code in March 2006.
|
||
|
|
There were originally about 100 defects reported. Some of these
|
||
|
|
were false positives. Over 70 issues were uncovered.
|
||
|
|
|
||
|
|
Each warning has a unique id and comments that can be made on it.
|
||
|
|
When checking in changes due to a warning, the unique id
|
||
|
|
as reported by the tool was added to the SVN commit message.
|
||
|
|
|
||
|
|
False positives were annotated so that the comments can
|
||
|
|
be reviewed and reversed if the analysis was incorrect.
|
||
|
|
|
||
|
|
Contact python-dev@python.org for more information.
|