Skip to main content

Browse the archive

Staging
v0.5.1
https://github.com/python/cpython
09 December 2020, 11:06:31 UTC
Revision d751040b1a4e35fd3b01fc919cd8f9374ed714fd authored by Berker Peksag on 14 September 2016, 05:37:28 UTC, committed by Berker Peksag on 14 September 2016, 05:37:28 UTC 
Issue #26171: Prevent buffer overflow in get_data
 
Backport of 01ddd608b85c.
1 parent 1f0e7c9
Raw File
Tip revision: d751040b1a4e35fd3b01fc919cd8f9374ed714fd authored by Berker Peksag on 14 September 2016, 05:37:28 UTC
Issue #26171: Prevent buffer overflow in get_data
Tip revision: d751040
README.coverity 

Coverity has a static analysis tool (Prevent) which is similar to Klocwork.
They run their tool on the Python source code (SVN head) on a daily basis.
The results are available at:

     http://scan.coverity.com/

About 20 people have access to the analysis reports.  Other
people can be added by request.

Prevent was first run on the Python 2.5 source code in March 2006.
There were originally about 100 defects reported.  Some of these
were false positives.  Over 70 issues were uncovered.

Each warning has a unique id and comments that can be made on it.
When checking in changes due to a warning, the unique id
as reported by the tool was added to the SVN commit message.

False positives were annotated so that the comments can
be reviewed and reversed if the analysis was incorrect.

Contact python-dev@python.org for more information.
back to top