Dear VPP Committers, Maintainers, and Contributors,
I am asking for your help today in reducing the backlog of Coverity
Issues reported on the VPP codebase. The current number of outstanding
issues is 243!
This is an unacceptably high number of open issues and is not a good
reflection on the quality and security practices of the VPP Community.
Can everyone pretty please (with sugar on top) log in to the Coverity
Scan fd-io-vpp project page [0] (sign up if you don't already have an
account) and spend some time reviewing the issues against the code that
you maintain or are at all familiar with. Most of the issues are not
hard to fix and many can be marked as false positives. With a bit of
regular review and maintenance, this backlog can be reduced rapidly if
everyone pitches in to help.
An easy way to stay on top of Coverity Issues is to register for email
updates, which include a summary of new defects that are found. Please
do so if you are not already subscribed to receive notification emails.
Please update the Triage record for any issue you are investigating and
assign yourself as the owner to prevent duplication of effort. If you
submit a fix, please include the URL to the gerrit change in the triage
comment field. Note: there are 2 issues that were marked as "Fix
Submitted" in 04/04/2019 and 10/16/2020, but upon investigation were
never committed.
Thanks in advance for your assistance in keeping VPP secure and bug free!
-daw-
"FD.io Security Response Team Chair"
[0] https://scan.coverity.com/projects/fd-io-vpp
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#27281): https://lists.fd.io/g/vpp-dev/message/27281
Mute This Topic: https://lists.fd.io/mt/121756492/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
