Re: git-bz-moz and Bugzilla 2 factor authentication

FWIW I have been using your branch since the last time you announced it and have yet to run into any problems, at least in git bz file and git bz attach which are the two commands I use all the time. Thanks for all of your help on this! On 2015-09-23 4:49 PM, Andrew McCreight wrote: I've

Re: Tech talk tomorrow: Windows GUI, COM, and IPC: Oh my!

Awesome! Please link to the talk in the platform section of https://wiki.mozilla.org/Gecko:Overview , which currently needs love. On Thu, Sep 24, 2015 at 12:15 PM, Aaron Klotz wrote: > In case anybody is interested: > > I'm going to be doing a tech talk tomorrow about the

About static analyzers on some various projects

Hello, An update on the various static analyzers that we are running on the Firefox, Fennec, NSS, NSPR and Thunderbird code. Warning: these tools are not Silver bullets. Due to their nature, they are going to generate false positives. However, they do find some important and critical issues

Re: About static analyzers on some various projects

Why not make scan-builds and infer results public? Those are public tools so we should assume black-hats already have the resutls. Rob -- lbir ye,ea yer.tnietoehr rdn rdsme,anea lurpr edna e hnysnenh hhe uresyf toD selthor stor edna siewaoeodm or v sstvr esBa kbvted,t rdsme,aoreseoouoto

Re: About static analyzers on some various projects

On Thu, Sep 24, 2015 at 4:23 PM, Nicholas Nethercote wrote: > On Thu, Sep 24, 2015 at 2:29 PM, Ehsan Akhgari > wrote: > > On 2015-09-24 1:41 PM, Sylvestre Ledru wrote: > >> > >> * Coverity, a proprietary tool with a great (but slow) web

Re: Tech talk tomorrow: Windows GUI, COM, and IPC: Oh my!

That's 5AM Saturday for me, so I'd love to see the recording! cpearce. On 9/25/2015 7:15 AM, Aaron Klotz wrote: In case anybody is interested: I'm going to be doing a tech talk tomorrow about the challenges of combining Windows GUI, Microsoft COM, and IPC in our code. It'll start with a

Re: About static analyzers on some various projects

On Thu, Sep 24, 2015 at 2:29 PM, Ehsan Akhgari wrote: > On 2015-09-24 1:41 PM, Sylvestre Ledru wrote: >> >> * Coverity, a proprietary tool with a great (but slow) web interface. > > Does anybody look at these regularly? I would be interested to know if they > produce

Re: About static analyzers on some various projects

On 2015-09-24 1:41 PM, Sylvestre Ledru wrote: = Static analyzers = For now, we are running: * Coverity, a proprietary tool with a great (but slow) web interface. As Firefox is Free software, the service is provided for free but with a restriction in term of number of build. Now, the analysis is

Considering dropping Talos support for Linux32

Our infrastructure at Mozilla does a great job of supporting all the jobs we need to run jobs for the thousands of pushes we do each month. Currently Talos runs on real hardware (and we have no plans to change that), but it does mean that we have a limited pool of available machines. Right

Re: About static analyzers on some various projects

On Friday, September 25, 2015 at 7:29:19 AM UTC+10, Ehsan Akhgari wrote: > On 2015-09-24 1:41 PM, Sylvestre Ledru wrote: > > = Static analyzers = > > For now, we are running: > > * Coverity, a proprietary tool with a great (but slow) web interface. As > > Firefox is Free software, the service is

Re: Considering dropping Talos support for Linux32

On Fri, Sep 25, 2015 at 1:40 PM, wrote: > Thanks for reading and fixing Performance regressions when they show up in > your patches! > FWIW I agree that Talos results for Linux32 are unimportant. Even if there was a Linux-32-only regression, I don't think it'd be worth our

Re: About static analyzers on some various projects

On Fri, Sep 25, 2015 at 5:41 AM, Sylvestre Ledru wrote: > Any questions, comments? > This whitepaper on Infer is an interesting read:

Tech talk tomorrow: Windows GUI, COM, and IPC: Oh my!

In case anybody is interested: I'm going to be doing a tech talk tomorrow about the challenges of combining Windows GUI, Microsoft COM, and IPC in our code. It'll start with a history lesson on the Windows GUI, some Microsoft COM essentials, and then I'll demonstrate how these topics

Re: Considering dropping Talos support for Linux32

On 9/24/15 6:55 PM, Robert O'Callahan wrote: FWIW I agree that Talos results for Linux32 are unimportant. Even if there was a Linux-32-only regression, I don't think it'd be worth our developers spending time on it. I agree. Kill them. https://www.youtube.com/watch?v=5DckrYRSsUA Justin