You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by Mark <el...@gmail.com> on 2007/09/07 04:04:01 UTC
mina source code analysis
I attended a conference last week, and at the conference I met David Maxwell
who is an open source strategist for Coverity. Coverity has developed tools
that perform static code analysis on C/C++ based projects. David mentioned
that Coverity is in the process of finalizing a tool that will process java
code and one of their focuses is on concurrent code analysis. I mentioned
to him that I am a committer on this project and David mentioned that
Coverity currently processes some Apache programs already. He said that
Coverity has an automated process in place which grabs open source programs
out of cvs/svn and analyzes the code and reports the results to the
developers at no cost.
I would like to take the lead on this and work with David to get MINA into
their processes so that Coverity could scan our baseline on a regular basis
and report the results back to us. I figure that it can only make our
program better.
Here is the link to Coverity's scan tool: http://scan.coverity.com/
thoughts/comments/questions....
--
..Cheers
Mark
Re: mina source code analysis
Posted by Mark <el...@gmail.com>.
I will find out the answer for you.
On 9/7/07, Tyronne Wickramaratne <be...@gmail.com> wrote:
>
> On 9/7/07, Emmanuel Lecharny <el...@gmail.com> wrote:
> >
> > Hi Mark,
> >
> > once a week should be ok. Just check with Infrastructure that it's not
> > a problem for them.
> >
> can we specify the day of the week and the time for this ?
>
> Thanks
> Tyronne Wickramarathne
>
> Thanks !
> >
> > On 9/7/07, Mark <el...@gmail.com> wrote:
> > > IIRC, they perform this analysis once a week. I will verify before we
> > agree
> > > to anything.
> > >
> > >
> > >
> > > On 9/7/07, Emmanuel Lecharny < elecharny@gmail.com> wrote:
> > > > Hi Mark,
> > > >
> > > > this sounds pretty interesting. MINA and Directory projects could
> > > > benefit from such a tool. There are two conditions though :
> > > > - it should _not_ kill Apache SVN server by grabbing the last
> > > > modifications every minutes. Once a week should be enough. I suggest
> > > > to ask infra about allowing such a tool to checkout the code on a
> > > > regular base (we have had really bad experiences lately with other
> > > > tools who killed the server more than once ...)
> > > > - If we get some valuable information, the it should be publicly
> > > > available to everybody. It's an open source project, with an open
> > > > community.
> > > >
> > > > My 2cts,
> > > >
> > > > Emmanuel
> > > >
> > > > On 9/7/07, Mark <el...@gmail.com> wrote:
> > > > > I attended a conference last week, and at the conference I met
> David
> > > Maxwell
> > > > > who is an open source strategist for Coverity. Coverity has
> > developed
> > > tools
> > > > > that perform static code analysis on C/C++ based projects. David
> > > mentioned
> > > > > that Coverity is in the process of finalizing a tool that will
> > process
> > > java
> > > > > code and one of their focuses is on concurrent code analysis. I
> > > mentioned
> > > > > to him that I am a committer on this project and David mentioned
> > that
> > > > > Coverity currently processes some Apache programs already. He
> said
> > that
> > > > > Coverity has an automated process in place which grabs open source
> > > programs
> > > > > out of cvs/svn and analyzes the code and reports the results to
> the
> > > > > developers at no cost.
> > > > >
> > > > > I would like to take the lead on this and work with David to get
> > MINA
> > > into
> > > > > their processes so that Coverity could scan our baseline on a
> > regular
> > > basis
> > > > > and report the results back to us. I figure that it can only make
> > our
> > > > > program better.
> > > > >
> > > > > Here is the link to Coverity's scan tool:
> http://scan.coverity.com/
> > > > >
> > > > >
> > > > > thoughts/comments/questions....
> > > > >
> > > > > --
> > > > > ..Cheers
> > > > > Mark
> > > > >
> > > >
> > > >
> > > > --
> > > > Regards,
> > > > Cordialement,
> > > > Emmanuel Lécharny
> > > > www.iktek.com
> > > >
> > >
> > >
> > >
> > > --
> > > ..Cheers
> > > Mark
> >
> >
> > --
> > Regards,
> > Cordialement,
> > Emmanuel Lécharny
> > www.iktek.com
> >
>
>
>
> --
> /usr/local/tyronne
> glück Ist der Regen, den Fälle hinter neigt, glück
>
--
..Cheers
Mark
Re: mina source code analysis
Posted by Tyronne Wickramaratne <be...@gmail.com>.
On 9/7/07, Emmanuel Lecharny <el...@gmail.com> wrote:
>
> Hi Mark,
>
> once a week should be ok. Just check with Infrastructure that it's not
> a problem for them.
>
can we specify the day of the week and the time for this ?
Thanks
Tyronne Wickramarathne
Thanks !
>
> On 9/7/07, Mark <el...@gmail.com> wrote:
> > IIRC, they perform this analysis once a week. I will verify before we
> agree
> > to anything.
> >
> >
> >
> > On 9/7/07, Emmanuel Lecharny < elecharny@gmail.com> wrote:
> > > Hi Mark,
> > >
> > > this sounds pretty interesting. MINA and Directory projects could
> > > benefit from such a tool. There are two conditions though :
> > > - it should _not_ kill Apache SVN server by grabbing the last
> > > modifications every minutes. Once a week should be enough. I suggest
> > > to ask infra about allowing such a tool to checkout the code on a
> > > regular base (we have had really bad experiences lately with other
> > > tools who killed the server more than once ...)
> > > - If we get some valuable information, the it should be publicly
> > > available to everybody. It's an open source project, with an open
> > > community.
> > >
> > > My 2cts,
> > >
> > > Emmanuel
> > >
> > > On 9/7/07, Mark <el...@gmail.com> wrote:
> > > > I attended a conference last week, and at the conference I met David
> > Maxwell
> > > > who is an open source strategist for Coverity. Coverity has
> developed
> > tools
> > > > that perform static code analysis on C/C++ based projects. David
> > mentioned
> > > > that Coverity is in the process of finalizing a tool that will
> process
> > java
> > > > code and one of their focuses is on concurrent code analysis. I
> > mentioned
> > > > to him that I am a committer on this project and David mentioned
> that
> > > > Coverity currently processes some Apache programs already. He said
> that
> > > > Coverity has an automated process in place which grabs open source
> > programs
> > > > out of cvs/svn and analyzes the code and reports the results to the
> > > > developers at no cost.
> > > >
> > > > I would like to take the lead on this and work with David to get
> MINA
> > into
> > > > their processes so that Coverity could scan our baseline on a
> regular
> > basis
> > > > and report the results back to us. I figure that it can only make
> our
> > > > program better.
> > > >
> > > > Here is the link to Coverity's scan tool: http://scan.coverity.com/
> > > >
> > > >
> > > > thoughts/comments/questions....
> > > >
> > > > --
> > > > ..Cheers
> > > > Mark
> > > >
> > >
> > >
> > > --
> > > Regards,
> > > Cordialement,
> > > Emmanuel Lécharny
> > > www.iktek.com
> > >
> >
> >
> >
> > --
> > ..Cheers
> > Mark
>
>
> --
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>
--
/usr/local/tyronne
glück Ist der Regen, den Fälle hinter neigt, glück
Re: mina source code analysis
Posted by Emmanuel Lecharny <el...@gmail.com>.
Hi Mark,
once a week should be ok. Just check with Infrastructure that it's not
a problem for them.
Thanks !
On 9/7/07, Mark <el...@gmail.com> wrote:
> IIRC, they perform this analysis once a week. I will verify before we agree
> to anything.
>
>
>
> On 9/7/07, Emmanuel Lecharny < elecharny@gmail.com> wrote:
> > Hi Mark,
> >
> > this sounds pretty interesting. MINA and Directory projects could
> > benefit from such a tool. There are two conditions though :
> > - it should _not_ kill Apache SVN server by grabbing the last
> > modifications every minutes. Once a week should be enough. I suggest
> > to ask infra about allowing such a tool to checkout the code on a
> > regular base (we have had really bad experiences lately with other
> > tools who killed the server more than once ...)
> > - If we get some valuable information, the it should be publicly
> > available to everybody. It's an open source project, with an open
> > community.
> >
> > My 2cts,
> >
> > Emmanuel
> >
> > On 9/7/07, Mark <el...@gmail.com> wrote:
> > > I attended a conference last week, and at the conference I met David
> Maxwell
> > > who is an open source strategist for Coverity. Coverity has developed
> tools
> > > that perform static code analysis on C/C++ based projects. David
> mentioned
> > > that Coverity is in the process of finalizing a tool that will process
> java
> > > code and one of their focuses is on concurrent code analysis. I
> mentioned
> > > to him that I am a committer on this project and David mentioned that
> > > Coverity currently processes some Apache programs already. He said that
> > > Coverity has an automated process in place which grabs open source
> programs
> > > out of cvs/svn and analyzes the code and reports the results to the
> > > developers at no cost.
> > >
> > > I would like to take the lead on this and work with David to get MINA
> into
> > > their processes so that Coverity could scan our baseline on a regular
> basis
> > > and report the results back to us. I figure that it can only make our
> > > program better.
> > >
> > > Here is the link to Coverity's scan tool: http://scan.coverity.com/
> > >
> > >
> > > thoughts/comments/questions....
> > >
> > > --
> > > ..Cheers
> > > Mark
> > >
> >
> >
> > --
> > Regards,
> > Cordialement,
> > Emmanuel Lécharny
> > www.iktek.com
> >
>
>
>
> --
> ..Cheers
> Mark
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: mina source code analysis
Posted by Mark <el...@gmail.com>.
IIRC, they perform this analysis once a week. I will verify before we agree
to anything.
On 9/7/07, Emmanuel Lecharny <el...@gmail.com> wrote:
>
> Hi Mark,
>
> this sounds pretty interesting. MINA and Directory projects could
> benefit from such a tool. There are two conditions though :
> - it should _not_ kill Apache SVN server by grabbing the last
> modifications every minutes. Once a week should be enough. I suggest
> to ask infra about allowing such a tool to checkout the code on a
> regular base (we have had really bad experiences lately with other
> tools who killed the server more than once ...)
> - If we get some valuable information, the it should be publicly
> available to everybody. It's an open source project, with an open
> community.
>
> My 2cts,
>
> Emmanuel
>
> On 9/7/07, Mark <el...@gmail.com> wrote:
> > I attended a conference last week, and at the conference I met David
> Maxwell
> > who is an open source strategist for Coverity. Coverity has developed
> tools
> > that perform static code analysis on C/C++ based projects. David
> mentioned
> > that Coverity is in the process of finalizing a tool that will process
> java
> > code and one of their focuses is on concurrent code analysis. I
> mentioned
> > to him that I am a committer on this project and David mentioned that
> > Coverity currently processes some Apache programs already. He said that
> > Coverity has an automated process in place which grabs open source
> programs
> > out of cvs/svn and analyzes the code and reports the results to the
> > developers at no cost.
> >
> > I would like to take the lead on this and work with David to get MINA
> into
> > their processes so that Coverity could scan our baseline on a regular
> basis
> > and report the results back to us. I figure that it can only make our
> > program better.
> >
> > Here is the link to Coverity's scan tool: http://scan.coverity.com/
> >
> >
> > thoughts/comments/questions....
> >
> > --
> > ..Cheers
> > Mark
> >
>
>
> --
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>
--
..Cheers
Mark
Re: mina source code analysis
Posted by Emmanuel Lecharny <el...@gmail.com>.
Hi Mark,
this sounds pretty interesting. MINA and Directory projects could
benefit from such a tool. There are two conditions though :
- it should _not_ kill Apache SVN server by grabbing the last
modifications every minutes. Once a week should be enough. I suggest
to ask infra about allowing such a tool to checkout the code on a
regular base (we have had really bad experiences lately with other
tools who killed the server more than once ...)
- If we get some valuable information, the it should be publicly
available to everybody. It's an open source project, with an open
community.
My 2cts,
Emmanuel
On 9/7/07, Mark <el...@gmail.com> wrote:
> I attended a conference last week, and at the conference I met David Maxwell
> who is an open source strategist for Coverity. Coverity has developed tools
> that perform static code analysis on C/C++ based projects. David mentioned
> that Coverity is in the process of finalizing a tool that will process java
> code and one of their focuses is on concurrent code analysis. I mentioned
> to him that I am a committer on this project and David mentioned that
> Coverity currently processes some Apache programs already. He said that
> Coverity has an automated process in place which grabs open source programs
> out of cvs/svn and analyzes the code and reports the results to the
> developers at no cost.
>
> I would like to take the lead on this and work with David to get MINA into
> their processes so that Coverity could scan our baseline on a regular basis
> and report the results back to us. I figure that it can only make our
> program better.
>
> Here is the link to Coverity's scan tool: http://scan.coverity.com/
>
>
> thoughts/comments/questions....
>
> --
> ..Cheers
> Mark
>
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com