[Daca-general] scan-build and metrics gsoc proposals and DACA

[Michael Tautschnig]

Hi,

> On Sun, Mar 17, 2013 at 06:46:38PM +0100, Raphael Geissert wrote:
> > While going through the list of gsoc proposals I found two that are 
> > basically related to my idea of DACA.
> 
> Hi Raphael et al., thanks for getting in touch: in fact, I wanted to get
> in touch with DACA people myself, so thanks for anticipating me :)
> 
> There is one piece of the puzzle missing, which I've discussed with
> Sylvestre. At IRILL (http://www.irill.org) I work closely with
> Coccinelle authors (http://coccinelle.lip6.fr/) and we are going to have
> a student working this "summer" (May->July) on periodic Coccinelle runs
> on all the C code found in Debian.
> 
[...]

Please do get in touch if you're interested in a single script where you could
essentially just put spatch or whatever other tool that supposedly acts whenever
gcc is supposed to be called with zero effort. It does all the work from setting
up a chroot to running on all present Debian packages in the suite of your
choice. This might save the student wading all the technical nasty bits to go
straight for the interesting (== Coccinelle) part. Yet this script also has one
shortcoming: it's not flexible, as you say below:

> That's our main interest, but I'm myself interested in having something
> more organic to easily plug in other static analysis tool. Hence DACA
> comes to mind. We are quite flexible, we can go from a minimal setup
> where we only run Coccinelle on a local source mirror, but I would very
> much prefer proper integration in a more suitable framework. In addition
> to that, we are also going to need a sort of source.debian.org service,
> that does syntax highlighting for multiple languages, to be used as a
> cross-reference service to pinpoint errors to specific lines of code. I
> hope to keep this as a separate piece of the puzzle, and to offer an API
> that would allow to attach "pop-up" messages via some Javascript
> hackery. We also aim to produce output compatible with firehose
> (https://github.com/fedora-static-analysis/firehose), but that too is
> just a small piece of the puzzle.
> 

This sounds very interesting indeed, and I'd like to be/get involved.

[...]

Best,
Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/daca-general/attachments/20130318/c2b1a824/attachment.pgp>