Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-10-16 Thread Michael Niedermayer
On Mon, Aug 12, 2024 at 07:40:41PM +0200, Michael Niedermayer wrote: > On Thu, Jul 25, 2024 at 04:41:26PM +0200, Michael Niedermayer wrote: > > On Sat, Jul 13, 2024 at 01:20:23AM +0200, Michael Niedermayer wrote: > > > On Fri, Jul 12, 2024 at 01:55:42AM +0200, Michael Niedermayer wrote: > > > [...]

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-07-25 Thread Michael Niedermayer
On Sat, Jul 13, 2024 at 01:20:23AM +0200, Michael Niedermayer wrote: > On Fri, Jul 12, 2024 at 01:55:42AM +0200, Michael Niedermayer wrote: > [...] > > Only 7 outstanding remain from prior may. and 19 total. So 99% of issues > > down to 3 outstanding prior may and 8 overall > > > [...] > > 16045

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-07-12 Thread Michael Niedermayer
On Fri, Jul 12, 2024 at 01:55:42AM +0200, Michael Niedermayer wrote: [...] > Only 7 outstanding remain from prior may. and 19 total. So 99% of issues down to 3 outstanding prior may and 8 overall [...] > 1604599 Overflowed constant; intentional > 1604530 Infinite loop ; "intentional" > 700368 Ex

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-11 Thread Michael Niedermayer
On Mon, Jun 10, 2024 at 02:45:14PM +0200, Vittorio Giovara wrote: > On Mon, Jun 10, 2024 at 2:41 PM Timo Rothenpieler > wrote: > > > > In either case, my point is that email is not a good system for these > > > reports, because they cannot be tracked nor analyzed, and if they do > > pose a > > >

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-10 Thread Vittorio Giovara
On Mon, Jun 10, 2024 at 2:41 PM Timo Rothenpieler wrote: > > In either case, my point is that email is not a good system for these > > reports, because they cannot be tracked nor analyzed, and if they do > pose a > > security risk they shouldn't be advertised so openly. Having a small > bounty >

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-10 Thread Timo Rothenpieler
On 10.06.2024 14:37, Vittorio Giovara wrote: On Mon, Jun 10, 2024 at 12:04 AM Michael Niedermayer wrote: On Sun, Jun 09, 2024 at 03:10:09PM +0200, Vittorio Giovara wrote: On Sun, Jun 9, 2024 at 12:50 AM Timo Rothenpieler On 08.06.2024 21:49, Vittorio Giovara wrote: On Sat, Jun 8, 2024 at 6:

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-10 Thread Vittorio Giovara
On Mon, Jun 10, 2024 at 12:04 AM Michael Niedermayer wrote: > On Sun, Jun 09, 2024 at 03:10:09PM +0200, Vittorio Giovara wrote: > > On Sun, Jun 9, 2024 at 12:50 AM Timo Rothenpieler > > > wrote: > > > > > On 08.06.2024 21:49, Vittorio Giovara wrote: > > > > On Sat, Jun 8, 2024 at 6:02 PM Michael

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-09 Thread Michael Niedermayer
On Sun, Jun 09, 2024 at 03:10:09PM +0200, Vittorio Giovara wrote: > On Sun, Jun 9, 2024 at 12:50 AM Timo Rothenpieler > wrote: > > > On 08.06.2024 21:49, Vittorio Giovara wrote: > > > On Sat, Jun 8, 2024 at 6:02 PM Michael Niedermayer < > > mich...@niedermayer.cc> > > > wrote: > > > > > >> On Tue

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-09 Thread Michael Niedermayer
On Sun, Jun 09, 2024 at 12:49:57AM +0200, Timo Rothenpieler wrote: > On 08.06.2024 21:49, Vittorio Giovara wrote: > > On Sat, Jun 8, 2024 at 6:02 PM Michael Niedermayer > > wrote: > > > > > On Tue, May 14, 2024 at 01:38:16AM +0200, Michael Niedermayer wrote: > > > > Hi all > > > > > > > > To kee

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-09 Thread Vittorio Giovara
On Sun, Jun 9, 2024 at 12:50 AM Timo Rothenpieler wrote: > On 08.06.2024 21:49, Vittorio Giovara wrote: > > On Sat, Jun 8, 2024 at 6:02 PM Michael Niedermayer < > mich...@niedermayer.cc> > > wrote: > > > >> On Tue, May 14, 2024 at 01:38:16AM +0200, Michael Niedermayer wrote: > >>> Hi all > >>> >

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-08 Thread Timo Rothenpieler
On 08.06.2024 21:49, Vittorio Giovara wrote: On Sat, Jun 8, 2024 at 6:02 PM Michael Niedermayer wrote: On Tue, May 14, 2024 at 01:38:16AM +0200, Michael Niedermayer wrote: Hi all To keep people updated (and as this is not vissible on the ML) heres my current list of issues marked as false po

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-08 Thread Vittorio Giovara
On Sat, Jun 8, 2024 at 6:02 PM Michael Niedermayer wrote: > On Tue, May 14, 2024 at 01:38:16AM +0200, Michael Niedermayer wrote: > > Hi all > > > > To keep people updated (and as this is not vissible on the ML) > > heres my current list of issues marked as false positives / intentional > in Mai &

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-06-08 Thread Michael Niedermayer
On Tue, May 14, 2024 at 01:38:16AM +0200, Michael Niedermayer wrote: > Hi all > > To keep people updated (and as this is not vissible on the ML) > heres my current list of issues marked as false positives / intentional in > Mai & April 2024 > (in case anyone wants to review, i presume noone wants

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-05-15 Thread Tomas Härdin
tis 2024-05-14 klockan 14:28 +0300 skrev Rémi Denis-Courmont: > > > Le 14 mai 2024 10:37:20 GMT+03:00, "Tomas Härdin" a > écrit : > > Formal methods would be better than the heuristics coverity uses. > > That sounds like wishful thinking, or at least a distant pipe dream. > Lets stick to what i

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-05-14 Thread Rémi Denis-Courmont
Le 14 mai 2024 10:37:20 GMT+03:00, "Tomas Härdin" a écrit : >Formal methods would be better than the heuristics coverity uses. That sounds like wishful thinking, or at least a distant pipe dream. Lets stick to what is possible and realistic today, please. And I don't think that it would be re

Re: [FFmpeg-devel] [WIP] False positives on Coverity

2024-05-14 Thread Tomas Härdin
Formal methods would be better than the heuristics coverity uses. At the moment such methods are still too expensive for general use except for the most safety critical applications (aerospace etc). But perhaps in time the tooling and SMT solvers will improve sufficiently to make it commonplace. F