You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by Steve Huston <sh...@riverace.com> on 2012/03/02 16:41:16 UTC

FW: Apache Qpid scan?

FYI re scanning Qpid with Coverity. The Java stuff is breaking new ground
and will be added later in the year (sorry, Rob ;-)

I'll get the C++ stuff scanned shortly.

-Steve

-----Original Message-----
From: Ben Gamble [mailto:bgamble@coverity.com] 
Sent: Thursday, March 01, 2012 4:27 PM
To: Steve Huston
Cc: scan-admin
Subject: Re: Apache Qpid scan?

>
>I'm associated with the Apache Qpid project (qpid.apache.org) and am 
>interested in having it scanned with Coverity Scan. How should I go 
>about this?

This is a fairly interesting situation, or will be soon: in 6 years and
~200 C and C++ projects, Scan has never had a Java project.  I've had
recent interest from a couple, but Qpid is the first that would cover both
C++ and Java, and the mechanics of handling and representing that in our
systems will be novel.

The other complication here is that Coverity's Java analysis is changing
completely in version 6.0, due out in April, and we've decided to defer
adding any Java projects until we can move Scan to 6.0, which will likely
happen in the second half of this year.

We can, however, easily accommodate your C++ codebase.  Here's the short
explanation of the build process for that:

0. There are three steps to analyze a codebase: build, analyze, and
commit.
1. You do the build step, then tar up the intermediate representation and
stick it somewhere we can get it by http.
2. Our scripts wget it, analyze it, commit it to the DB and send you an
email.

Instructions and build tools are here:
http://scan.coverity.com/self-build/

We'll start out cranking through the process by hand so we can fix any
problems in the build stage (and because I'm still rewriting some of the
automation), so once you've built and tarred up an intermediate directory,
just reply to this message with a URL to it, and I'll take it from there.

Please let me know if you have any trouble with or questions about the
build process, of course, and thank you for your interest in Scan!

--
Ben Gamble | Open Source Build Engineer
Coverity | 185 Berry Street | Suite 6500, Lobby 3 | San Francisco, CA
94107
Office: 415.694.5350 | Mobile: 415.602.7669 | bgamble@coverity.com The
Leader in Development Testing



---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org