qpid-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Huston" <shus...@riverace.com>
Subject FW: Apache Qpid scan?
Date Fri, 02 Mar 2012 15:41:16 GMT
FYI re scanning Qpid with Coverity. The Java stuff is breaking new ground
and will be added later in the year (sorry, Rob ;-)

I'll get the C++ stuff scanned shortly.


-----Original Message-----
From: Ben Gamble [mailto:bgamble@coverity.com] 
Sent: Thursday, March 01, 2012 4:27 PM
To: Steve Huston
Cc: scan-admin
Subject: Re: Apache Qpid scan?

>I'm associated with the Apache Qpid project (qpid.apache.org) and am 
>interested in having it scanned with Coverity Scan. How should I go 
>about this?

This is a fairly interesting situation, or will be soon: in 6 years and
~200 C and C++ projects, Scan has never had a Java project.  I've had
recent interest from a couple, but Qpid is the first that would cover both
C++ and Java, and the mechanics of handling and representing that in our
systems will be novel.

The other complication here is that Coverity's Java analysis is changing
completely in version 6.0, due out in April, and we've decided to defer
adding any Java projects until we can move Scan to 6.0, which will likely
happen in the second half of this year.

We can, however, easily accommodate your C++ codebase.  Here's the short
explanation of the build process for that:

0. There are three steps to analyze a codebase: build, analyze, and
1. You do the build step, then tar up the intermediate representation and
stick it somewhere we can get it by http.
2. Our scripts wget it, analyze it, commit it to the DB and send you an

Instructions and build tools are here:

We'll start out cranking through the process by hand so we can fix any
problems in the build stage (and because I'm still rewriting some of the
automation), so once you've built and tarred up an intermediate directory,
just reply to this message with a URL to it, and I'll take it from there.

Please let me know if you have any trouble with or questions about the
build process, of course, and thank you for your interest in Scan!

Ben Gamble | Open Source Build Engineer
Coverity | 185 Berry Street | Suite 6500, Lobby 3 | San Francisco, CA
Office: 415.694.5350 | Mobile: 415.602.7669 | bgamble@coverity.com The
Leader in Development Testing

Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org

View raw message