[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] Coverity + XenProject + Process?

On 30/08/13 16:00, Konrad Rzeszutek Wilk wrote:
> Hey
> We have a static analyzer setup for Xen called Coverity. It allows
> the code to be inspected for bugs and such.
> Originally I setup this so that we could make sure that there are no
> bugs that cause security issues - and as such invited only folks
> on the security Xen mailing list.

If there has been a pass already and that found no security issues, I
think the results should be made open and available to all.

Any (new) issues coverity might find in a development branch are just
bugs and not (yet) a security issues.


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.