Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-12-01 Thread Artem Mygaiev
On 30.11.16 21:21, Andrew Cooper wrote: > On 29/11/16 15:09, Artem Mygaiev wrote: >> Hi Julien >> >> On 29.11.16 16:27, Julien Grall wrote: >>> Hi Artem, >>> >>> On 29/11/16 14:21, Artem Mygaiev wrote: Lars, the project is approved by Coverity. Scan has found some issues in xen/arch/arm o

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-30 Thread Andrew Cooper
On 29/11/16 15:09, Artem Mygaiev wrote: > Hi Julien > > On 29.11.16 16:27, Julien Grall wrote: >> Hi Artem, >> >> On 29/11/16 14:21, Artem Mygaiev wrote: >>> Lars, the project is approved by Coverity. Scan has found some issues in >>> xen/arch/arm on master, part of them are false positives. >> Per

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-30 Thread Stefano Stabellini
Thank you! On Wed, 30 Nov 2016, Artem Mygaiev wrote: > Done > > > On 29.11.16 20:19, Stefano Stabellini wrote: > > On Tue, 29 Nov 2016, Artem Mygaiev wrote: > >> Hi Julien > >> > >> On 29.11.16 16:27, Julien Grall wrote: > >>> Hi Artem, > >>> > >>> On 29/11/16 14:21, Artem Mygaiev wrote: >

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-30 Thread Artem Mygaiev
Done On 29.11.16 20:19, Stefano Stabellini wrote: > On Tue, 29 Nov 2016, Artem Mygaiev wrote: >> Hi Julien >> >> On 29.11.16 16:27, Julien Grall wrote: >>> Hi Artem, >>> >>> On 29/11/16 14:21, Artem Mygaiev wrote: Lars, the project is approved by Coverity. Scan has found some issues in

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-30 Thread Artem Mygaiev
Hi Lars On 29.11.16 17:04, Lars Kurth wrote: > Please don't post them to xen-devel@ though: as a one-off, you may want to > send to Julien and maybe Stefano > Longer term, we ought to find a way to send the output to a safe place, as > for x86 > Lars I have added Julien, Stefano and you as membe

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Stefano Stabellini
On Tue, 29 Nov 2016, Artem Mygaiev wrote: > Hi Julien > > On 29.11.16 16:27, Julien Grall wrote: > > Hi Artem, > > > > On 29/11/16 14:21, Artem Mygaiev wrote: > >> Lars, the project is approved by Coverity. Scan has found some issues in > >> xen/arch/arm on master, part of them are false positives

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Julien Grall
On 29/11/16 15:09, Artem Mygaiev wrote: Hi Julien On 29.11.16 16:27, Julien Grall wrote: Hi Artem, On 29/11/16 14:21, Artem Mygaiev wrote: Lars, the project is approved by Coverity. Scan has found some issues in xen/arch/arm on master, part of them are false positives. Perfect. It would b

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Artem Mygaiev
Hi Julien On 29.11.16 16:27, Julien Grall wrote: > Hi Artem, > > On 29/11/16 14:21, Artem Mygaiev wrote: >> Lars, the project is approved by Coverity. Scan has found some issues in >> xen/arch/arm on master, part of them are false positives. > > Perfect. It would be interesting to know the list of

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Lars Kurth
Please don't post them to xen-devel@ though: as a one-off, you may want to send to Julien and maybe Stefano Longer term, we ought to find a way to send the output to a safe place, as for x86 Lars On 29/11/2016 14:27, "Julien Grall" wrote: >Hi Artem, > >On 29/11/16 14:21, Artem Mygaiev wrote: >>

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Julien Grall
Hi Artem, On 29/11/16 14:21, Artem Mygaiev wrote: Lars, the project is approved by Coverity. Scan has found some issues in xen/arch/arm on master, part of them are false positives. Perfect. It would be interesting to know the list of issues so we can categorize them (i.e are they security iss

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-29 Thread Artem Mygaiev
Lars, the project is approved by Coverity. Scan has found some issues in xen/arch/arm on master, part of them are false positives. On 28.11.16 13:01, Artem Mygaiev wrote: > On 28.11.16 12:27, Lars Kurth wrote: >> On 22/11/2016 13:54, "Artem Mygaiev" wrote: >>> On 22.11.16 15:42, Andrew Cooper wr

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-28 Thread Artem Mygaiev
On 28.11.16 12:27, Lars Kurth wrote: > On 22/11/2016 13:54, "Artem Mygaiev" wrote: >> On 22.11.16 15:42, Andrew Cooper wrote: >>> The only way we could scan for ARM is if we could be given multiple >>> different streams (one per arch) to use, and Coverity have already said >>> no to this request.

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-28 Thread Lars Kurth
On 22/11/2016 13:54, "Artem Mygaiev" wrote: >On 22.11.16 15:42, Andrew Cooper wrote: >> >> >> The only way we could scan for ARM is if we could be given multiple >> different streams (one per arch) to use, and Coverity have already said >> no to this request. This is a politics problem, not a

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Artem Mygaiev
On 22.11.16 15:42, Andrew Cooper wrote: > On 22/11/16 11:55, Lars Kurth wrote: >> On 22/11/2016 11:51, "Julien Grall" wrote: >> >>> Hi Lars, >>> >>> On 19/11/16 16:53, Lars Kurth wrote: On 18/11/2016 20:55, "Julien Grall" wrote: > Coverity has been proven useful on x86 to catch some bugs

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Andrew Cooper
On 22/11/16 11:55, Lars Kurth wrote: > > On 22/11/2016 11:51, "Julien Grall" wrote: > >> Hi Lars, >> >> On 19/11/16 16:53, Lars Kurth wrote: >>> On 18/11/2016 20:55, "Julien Grall" wrote: Coverity has been proven useful on x86 to catch some bugs. A such things would be nice for ARM

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Artem Mygaiev
Coverity Scan does static analysis only, but hooks into the build system in order to track compilation process and build map of source code to analyze. In addition to connecting the build process, user of Scan needs to provide a) filters to specify particular components for analysis and b) model t

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Lars Kurth
On 22/11/2016 11:51, "Julien Grall" wrote: >Hi Lars, > >On 19/11/16 16:53, Lars Kurth wrote: >> On 18/11/2016 20:55, "Julien Grall" wrote: >>> >>> Coverity has been proven useful on x86 to catch some bugs. A such >>>things >>> would be nice for ARM too. Is there anything we can do to get cover

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Julien Grall
Hi Lars, On 19/11/16 16:53, Lars Kurth wrote: On 18/11/2016 20:55, "Julien Grall" wrote: Coverity has been proven useful on x86 to catch some bugs. A such things would be nice for ARM too. Is there anything we can do to get coverity testing ARM? (CC Lars). Coverity does static code analysis

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-22 Thread Artem Mygaiev
On 18.11.16 22:55, Julien Grall wrote: > Coverity has been proven useful on x86 to catch some bugs. A such > things would be nice for ARM too. Is there anything we can do to get > coverity testing ARM? (CC Lars). This is exactly what we want to do - update model files (if needed), prepare some refe

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-19 Thread Lars Kurth
On 18/11/2016 20:55, "Julien Grall" wrote: >Hello, > >On 18/11/2016 09:28, Konrad Rzeszutek Wilk wrote: >> On Fri, Nov 18, 2016 at 01:56:38PM +, Andrew Cooper wrote: >>> On 18/11/16 13:36, Artem Mygaiev wrote: Hello I would like to request access to Coverity Scan project. Her

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-18 Thread Julien Grall
Hello, On 18/11/2016 09:28, Konrad Rzeszutek Wilk wrote: On Fri, Nov 18, 2016 at 01:56:38PM +, Andrew Cooper wrote: On 18/11/16 13:36, Artem Mygaiev wrote: Hello I would like to request access to Coverity Scan project. Hereby, I: - agree to follow the security response process. - undert

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-18 Thread Konrad Rzeszutek Wilk
On Fri, Nov 18, 2016 at 01:56:38PM +, Andrew Cooper wrote: > On 18/11/16 13:36, Artem Mygaiev wrote: > > Hello > > > > I would like to request access to Coverity Scan project. Hereby, I: > > - agree to follow the security response process. > > - undertake to report security issues discovered

Re: [Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-18 Thread Andrew Cooper
On 18/11/16 13:36, Artem Mygaiev wrote: > Hello > > I would like to request access to Coverity Scan project. Hereby, I: > - agree to follow the security response process. > - undertake to report security issues discovered to the security team > (secur...@xenproject.org) within 3 days of discovery

[Xen-devel] [COVERITY ACCESS] for Embedded/Automotive team

2016-11-18 Thread Artem Mygaiev
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello I would like to request access to Coverity Scan project. Hereby, I: - agree to follow the security response process. - undertake to report security issues discovered to the security team (secur...@xenproject.org) within 3 days of discovery.