[Opendnssec-develop] static analyzer

[John Dickinson]

On 21 Nov 2013, at 14:33, Sara Dickinson <sara at sinodun.com> wrote:

> Hi All, 
> 
> The minutes from the meeting today are available for review:
> 
> https://wiki.opendnssec.org/display/OpenDNSSEC/2013-11-21+Minutes


Hi All,

I have been playing with the clang static analyzer. (http://clang-analyzer.llvm.org/)

Results from running it on SoftHSM and OpenDNSSEC can be found at:

https://dev.sinodun.com/analysis/opendnssec/
https://dev.sinodun.com/analysis/softhsm/

AFAIK - the analyser steps through all code paths and flags up those that result in a issue. Some of these are (of course) false positives.

FYI - I ran it like this (On ubuntu 13.10)

export PATH=$PATH:/opt/llvm/bin/:~/Development/clang/llvm/tools/clang/tools/scan-build:~/Development/clang/llvm/tools/clang/tools/scan-view
svn co  http://svn.opendnssec.org/trunk/softHSM SoftHSM
cd SoftHSM
sh autogen.sh
scan-build --use-analyzer /opt/llvm/bin/clang ./configure --with-botan=/usr
scan-build --use-analyzer /opt/llvm/bin/clang make

svn co http://svn.opendnssec.org/trunk/OpenDNSSEC OpenDNSSEC
cd OpenDNSSEC
sh autogen.sh
scan-build --use-analyzer /opt/llvm/bin/clang ./configure
scan-build --use-analyzer /opt/llvm/bin/clang make

regards
John

---
jad at sinodun.com

http://sinodun.com

Sinodun Internet Technologies Ltd.
Stables 4, Suite 11,
Howbery Park,
Wallingford,
Oxfordshire,
OX10 8BA,
U.K.

+44 (0)1491 834957

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20131125/411b759b/attachment.bin>