[opennms-devel] Coverity Static analysis

2008-05-21 Thread Alex Bennee
Hi, Just going through the news today and I was reminded of Coverity's static analysis tool which now supports Java. Has anyone every tried running OpenNMS through their public scanner? Would anyone object if I was to sign up to do so? -- Alex Bennee Software Engineer, Cambridge Broadband

Re: [opennms-devel] Coverity Static analysis

2008-05-21 Thread Benjamin Reed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Bennee wrote: | Hi, | | Just going through the news today and I was reminded of Coverity's | static analysis tool which now supports Java. Has anyone every tried | running OpenNMS through their public scanner? Would anyone object if I | was to sig

Re: [opennms-devel] Coverity Static analysis

2008-05-21 Thread Tarus Balog
On May 21, 2008, at 8:28 AM, Benjamin Reed wrote: > Alex Bennee wrote: > | Hi, > | > | Just going through the news today and I was reminded of Coverity's > | static analysis tool which now supports Java. Has anyone every tried > | running OpenNMS through their public scanner? Would anyone object

[opennms-devel] [PATCH] Fix bounds on mib2opennms

2008-05-21 Thread Alex Bennee
mib2opennms uses strcat (which adds an additional byte each time) to build paths but only allocates strlen bytes which doesn't take the null byte into account. Index: mib2opennms.c === --- mib2opennms.c (revision 9194) +++ mib2o

Re: [opennms-devel] [PATCH] Fix bounds on mib2opennms

2008-05-21 Thread Jeff Gehlbach
On May 21, 2008, at 10:31 AM, Alex Bennee wrote: > mib2opennms uses strcat (which adds an additional byte each time) to > build paths but only allocates strlen bytes which doesn't take the > null > byte into account. Please create a bug at http://bugzilla.opennms.org/ lest this be forgotten.