23 lines
		
	
	
		
			845 B
		
	
	
	
		
			Plaintext
		
	
	
	
			
		
		
	
	
			23 lines
		
	
	
		
			845 B
		
	
	
	
		
			Plaintext
		
	
	
	
| 
 | |
| Coverity has a static analysis tool (Prevent) which is similar to Klocwork.
 | |
| They run their tool on the Python source code (SVN head) on a daily basis.
 | |
| The results are available at:
 | |
| 
 | |
|      http://scan.coverity.com/
 | |
| 
 | |
| About 20 people have access to the analysis reports.  Other
 | |
| people can be added by request.
 | |
| 
 | |
| Prevent was first run on the Python 2.5 source code in March 2006.
 | |
| There were originally about 100 defects reported.  Some of these
 | |
| were false positives.  Over 70 issues were uncovered.
 | |
| 
 | |
| Each warning has a unique id and comments that can be made on it.
 | |
| When checking in changes due to a warning, the unique id
 | |
| as reported by the tool was added to the SVN commit message.
 | |
| 
 | |
| False positives were annotated so that the comments can
 | |
| be reviewed and reversed if the analysis was incorrect.
 | |
| 
 | |
| Contact python-dev@python.org for more information.
 |