Bug#891422: tracker.debian.org: link to cppcheck results for packages

[Daniel Marjamäki]

I analyze the debian source packages I find here:

ftp://ftp.se.debian.org/debian/pool/main/

If you have an alternative location that you would prefer let me know.
Maybe there is some better location with "bleeding edge" source code
for instance.


> The format can be anything you like as long as it is machine-readable.

Imagine I analyze these packages:
ftp://ftp.se.debian.org/debian/pool/main/a/a2jmidid/a2jmidid_8~dfsg0.orig.tar.bz2
ftp://ftp.se.debian.org/debian/pool/main/a/a2ps/a2ps_4.14.orig.tar.gz

How about some format like this:

[
  { "package" : "a2jmidid", "results" :
"http://www.cppcheck.net/devinfo/daca2/a2jmidid.txt; },
  { "package" : "a2ps", "results" :
"http://www.cppcheck.net/devinfo/daca2/a2ps.txt; }
]

> PS: have cppcheck folks considered supporting the firehose static
> analysis results format?

I am not against that additional output formats are added.

However I would like to understand the reason for doing it. I have the
impression that firehose has some builtin cppcheck-import function.

Best regards,
Daniel Marjamäki

Bug#891422: tracker.debian.org: link to cppcheck results for packages

[Daniel Marjamäki]

Package: tracker.debian.org
Severity: wishlist

In the Cppcheck project we continuously analyze debian source code.
The results are shown here:
http://cppcheck.sourceforge.net/devinfo/daca2-report/daca2.html

Our reason for doing this is mostly to test how well Cppcheck works..
but I would like to also share the results with the Debian
contributors so they can be used to fix Debian bugs.

In the tracker.debian.org, maybe "cppcheck results" links could be
added in the right column for each package.

I volounteer to make sure the results are uploaded to some suitable
destination and suitable format. But somebody else must fix so that
tracker.debian.org publish these results. I don't know what the
"suitable destination and suitable format" would be .. so feel free to
suggest these.

I would also like to be able to upload a list of "warnings that are
definitely not false positives". Such warnings could be shown in the
centre maybe?

Best regards,
Daniel Marjamäki