Re: Lintian as a static analysis framework

2011-07-13 Thread Niels Thykier
On 2011-07-11 11:53, Stefano Zacchiroli wrote: On Sun, Jul 10, 2011 at 01:08:23PM +0200, Niels Thykier wrote: [...] I think I was unclear here; my intention for the question was more down the lines of how will you access the data (e.g. the root dir)? Do you plan on doing all the processing

Re: Lintian as a static analysis framework

2011-07-11 Thread Stefano Zacchiroli
On Sun, Jul 10, 2011 at 01:08:23PM +0200, Niels Thykier wrote: Then I need an easy way to access all (unpacked) source packages I have, query their package metadata, find their root directory and run my analysis tool of choice on the source package. Bulk access or a given package name

Re: Lintian as a static analysis framework

2011-07-10 Thread Niels Thykier
On 2011-07-09 14:36, Stefano Zacchiroli wrote: On Fri, Jul 08, 2011 at 10:36:07AM +0200, Niels Thykier wrote: So basically incrementally pulling packages from a mirror via Sources file? I cannot help but think we must do something like that on lintian.d.o (especially considering we usually do

Re: Lintian as a static analysis framework

2011-07-10 Thread Niels Thykier
On 2011-07-09 11:30, Niels Thykier wrote: On 2011-07-08 18:08, Russ Allbery wrote: Niels Thykier ni...@thykier.net writes: [...] So perhaps it is time to have a look at how the Lintian::Collect migration is going. I manually checked each of our checks to estimate how we are doing. The

Re: Lintian as a static analysis framework

2011-07-09 Thread Niels Thykier
On 2011-07-08 18:08, Russ Allbery wrote: Niels Thykier ni...@thykier.net writes: Occasionally I have found myself considering to write some tool to check for something that would require (e.g.) a Packages file[1] only to stop because I need to (re-)write a package extractor, a dsc or

Re: Lintian as a static analysis framework

2011-07-09 Thread Stefano Zacchiroli
On Fri, Jul 08, 2011 at 10:36:07AM +0200, Niels Thykier wrote: So basically incrementally pulling packages from a mirror via Sources file? I cannot help but think we must do something like that on lintian.d.o (especially considering we usually do incremental runs). Yes, although I'd like to

Re: Lintian as a static analysis framework

2011-07-09 Thread Niels Thykier
On 2011-07-09 11:30, Niels Thykier wrote: On 2011-07-08 18:08, Russ Allbery wrote: Niels Thykier ni...@thykier.net writes: [...] Uses any parts of the lab (17): [...] copyright-file (source, copyright) - The source part can be replaced with a look in $group for the source

Re: Lintian as a static analysis framework

2011-07-08 Thread Stefano Zacchiroli
On Thu, Jul 07, 2011 at 07:26:58PM +0200, Paul Wise wrote: - the reborn of a sources.debian.org service (sort of browsable /  highlighted/ searchable Debian sources at your fingertips on the web) Is there any info about this? Not yet, as I wanted (and still want) to have a prototype to

Re: Lintian as a static analysis framework

2011-07-08 Thread Dominique Dumont
On Thursday 07 July 2011 12:00:38 Niels Thykier wrote: Yesterday in #debian-qa, I chatted with Paul Wise and the idea came up that Lintian should be a framework that others could use as a basis for their own analysis - particularly when these analysis would conflict with some of the Lintian

Re: Lintian as a static analysis framework

2011-07-08 Thread Niels Thykier
On 2011-07-07 18:24, Stefano Zacchiroli wrote: On Thu, Jul 07, 2011 at 12:00:38PM +0200, Niels Thykier wrote: [...] To achieve the above two goals, I need to keep in sync a Debian (source) mirror with a place where I've all sources unpacked in versioned directories. Additions/removals to

Re: Lintian as a static analysis framework

2011-07-08 Thread Paul Wise
On Fri, Jul 8, 2011 at 9:25 AM, Stefano Zacchiroli wrote: I haven't yet chosen the technology for code indexing, but if anyone has experience with *multi-language* code indexers, I'd be happy to hear from you. I've looked around a bit, but I've found good technologies only for specific

Re: Lintian as a static analysis framework

2011-07-08 Thread Niels Thykier
On 2011-07-08 10:39, Paul Wise wrote: On Fri, Jul 8, 2011 at 9:25 AM, Stefano Zacchiroli wrote: [...] I guess that would clash with the dear old tension among minimizing lintian dependencies and being able to do very specific checks. We really don't want to have lintian depend on all

Re: Lintian as a static analysis framework

2011-07-08 Thread Paul Wise
On Fri, Jul 8, 2011 at 12:30 PM, Niels Thykier wrote: We could do it like that, though the vendor profiles specification actually deliberately did not answer the question of how to add third-party checks.  I know some people already do this, so we have made Lintian behave sanely to it.  The

Re: Lintian as a static analysis framework

2011-07-08 Thread Russ Allbery
Paul Wise p...@debian.org writes: On Fri, Jul 8, 2011 at 12:30 PM, Niels Thykier wrote: We could do it like that, though the vendor profiles specification actually deliberately did not answer the question of how to add third-party checks.  I know some people already do this, so we have made

Re: Lintian as a static analysis framework

2011-07-08 Thread Russ Allbery
Niels Thykier ni...@thykier.net writes: Occasionally I have found myself considering to write some tool to check for something that would require (e.g.) a Packages file[1] only to stop because I need to (re-)write a package extractor, a dsc or d/control parser, two of Lintian's collections

Lintian as a static analysis framework

2011-07-07 Thread Niels Thykier
Hi Yesterday in #debian-qa, I chatted with Paul Wise and the idea came up that Lintian should be a framework that others could use as a basis for their own analysis - particularly when these analysis would conflict with some of the Lintian design goals (namely we try to be independent of the