Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Paul Morriss
I am keen to get more involved in the development of OpenSSL, I am curious, has the code been run through a static analysis tool (such as Coverity)? There are self checks, are there unit tests (e.g. Google Test/Mock)created for any part of OpenSSL? Paul

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Mike Bland
I'm (slowly) helping on the unit testing front. Check out http://wiki.openssl.org/index.php/Unit_Testing and https://groups.google.com/forum/#!forum/openssl-testing for more info. Currently I'm working on trying to refactor bits of the build system, which I hope will make it easier to perform

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread dcruette
I'm also on the way to create unit tests on the source code basis I'm stuck for the moment on controling the Windows/mingw compile / test process, quite long I must admit ! I'll make feedback as soon as good news are available ! Didier CRUETTE QualiteSys Le 09.07.2014 15:56, Mike Bland a

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Paul Morriss
It sounds like us three should try and coordinate our efforts. Ideally, once we start getting working tests we can setup a Jenkins server to automate the process. Paul On 2014-07-09 15:42, dcrue...@qualitesys.com wrote: I'm also on the way to create unit tests on the source code basis I'm

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Ben Laurie
On 9 July 2014 14:38, Paul Morriss paul.morr...@tokenbay.co.uk wrote: I am keen to get more involved in the development of OpenSSL, I am curious, has the code been run through a static analysis tool (such as Coverity)? Coverity do run OpenSSL through their tool. The false positive rate is

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Theodore Ts'o
On Wed, Jul 09, 2014 at 06:20:49PM +0100, Ben Laurie wrote: On 9 July 2014 14:38, Paul Morriss paul.morr...@tokenbay.co.uk wrote: I am keen to get more involved in the development of OpenSSL, I am curious, has the code been run through a static analysis tool (such as Coverity)? Coverity do

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread dcruette
Ideally to, making a Jenkins CI up and running feed by the nightly Snapshoots would be a good start, with a Linux distrib and a Windows distrib for a start. I could afterwards provide you my custom C/C++ maven sonar plugin (for free for Openssl) for static source code audit. And at last (not

Re: Unit Testing/statically analysing OpenSSL

2014-07-09 Thread Kurt Roeckx
On Wed, Jul 09, 2014 at 03:33:28PM -0400, Theodore Ts'o wrote: On Wed, Jul 09, 2014 at 06:20:49PM +0100, Ben Laurie wrote: On 9 July 2014 14:38, Paul Morriss paul.morr...@tokenbay.co.uk wrote: I am keen to get more involved in the development of OpenSSL, I am curious, has the code