[
https://issues.apache.org/jira/browse/PROTON-2417?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17405440#comment-17405440
]
Jiri Daněk edited comment on PROTON-2417 at 8/26/21, 7:46 PM:
--------------------------------------------------------------
h3. h3. Here are the results
*Facebook Infer*: [^infer-report.txt] (txt report) [^infer-report.zip] (html
report)
*Coverity*: [https://scan.coverity.com/projects/apache-qpid-protonj2] (summary
page) [https://scan.coverity.com/projects/apache-qpid-protonj2/view_defects]
(may still require login, I gave the most liberal access settings available...)
*Spot Bugs*: see coverity, that includes some SpotBugs errors; the vanilla
SpotBugs tool reports lots of things that are more a matter of style than
correctness
*Error Prone*: TODO (I suppressed the JavaDoc Google StyleGuide check that was
responsible for most of the reports before)
was (Author: jdanek):
Here are the results:
*Facebook Infer*: [^infer-report.txt] (txt report) [^infer-report.zip] (html
report)
*Coverity*: [https://scan.coverity.com/projects/apache-qpid-protonj2] (summary
page) [https://scan.coverity.com/projects/apache-qpid-protonj2/view_defects]
(may still require login, I gave the most liberal access settings available...)
*Spot Bugs*: see coverity, that includes some SpotBugs errors; the vanilla
SpotBugs tool reports lots of things that are more a matter of style than
correctness
*Error Prone*: TODO (I suppressed the JavaDoc Google StyleGuide check that was
responsible for most of the reports before)
> [ProtonJ2] Add errorprone or some other linter/checker to the maven build
> -------------------------------------------------------------------------
>
> Key: PROTON-2417
> URL: https://issues.apache.org/jira/browse/PROTON-2417
> Project: Qpid Proton
> Issue Type: Bug
> Components: protonj2
> Reporter: Jiri Daněk
> Assignee: Jiri Daněk
> Priority: Major
> Attachments: infer-report.txt, infer-report.zip
>
>
> Artemis uses Error Prone (https://errorprone.info/), then there is also
> SpotBugs (https://spotbugs.github.io/) or possibly Infer
> (https://fbinfer.com/). Apache projects can get resources on
> https://sonarcloud.io/. And there is always Coverity Scan
> (https://scan.coverity.com/).
> One (or more) of these tools/services could/should be used, because they can
> find real bugs with only a reasonable effort.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
