Re: Xen FuSa meeting tomorrow Tue 17 November

[Bertrand Marquis <Bertrand.Marquis@xxxxxxx>]

Hi Stefano,

> On 19 Nov 2020, at 20:20, Stefano Stabellini <stefano.stabellini@xxxxxxxxxx> 
> wrote:
> 
> Hi Artem, Francesco, and all,
> 
> I think we should come up with a shortlist of potential candidates. As
> we discussed during the last two calls, aside from price, the important
> parameters are:
> 
> - completeness of the MISRAC checks
> - ability of being called automatically as part of the CI-loop
>    - availability of a remote API
>    - OR a license that allows for headless invocations
> - ability to take as input a list of deviations maintained together with
>  the source code (so that can we have different deviations for each Xen
>  branch)
> 
> Does this set of criteria seem reasonable?

I think an important one is the ability to share the results of the tool.
If the results are protected by some kind of license we will end up having
to fix all problems without an opportunity to share the tool results on the
mailing list for example if the CI loop can (and I think it is critical that it 
does)
be executed on pushes to the mailing list before they are merged in staging.

Cheers
Bertrand

> 
> 
> On Thu, 19 Nov 2020, Artem Mygaiev wrote:
>> Hello all
>> 
>> Using Coverity for MISRA was considered some time ago at the very first days 
>> of FuSa SIG. Coverity indeed supports MISRA but there's a catch: Open Source 
>> version of Coverity (Coverity Scan) does not support MISRA.
>> 
>> BR,
>> -- Artem
>> 
>> -----Original Message-----
>> From: Fusa-sig <fusa-sig-bounces@xxxxxxxxxxxxxxxxxxxx> On Behalf Of Julien 
>> Grall
>> Sent: четверг, 19 ноября 2020 г. 12:27
>> To: Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
>> Cc: David Ward <david.ward@xxxxxxxxxxxxxxx>; Francesco Brancati 
>> <francesco.brancati@xxxxxxxxxxxxx>; pserwa@xxxxxxxxx; 
>> mszczepankiewicz@xxxxxxxxx; fusa-sig@xxxxxxxxxxxxxxxxxxxx; Manthey, Norbert 
>> <nmanthey@xxxxxxxxx>
>> Subject: Re: Xen FuSa meeting tomorrow Tue 17 November
>> 
>> (+Norbert)
>> 
>> On 18/11/2020 19:15, Julien Grall wrote:
>>>>> So you have enough data from coverity to provide some meaningful 
>>>>> information.
>>>>> :) I don't know whether this is based on just parsing e-mails or 
>>>>> tools coverity may provide in a paid version.
>>>> 
>>>> Excellent. Yeah, that is the kind of level of integration that we need.
>>> 
>>> I have asked the person in charge if he could provide more details how 
>>> this was setup and the complexity to get it working. I will let you 
>>> know when I have an answer.
>> 
>> I have CCed Norbert who worked on the integration of coverity. @Stefano, 
>> feel free to ask more details on the setup.
>> 
>> Cheers,
>> 
>> --
>> Julien Grall
>>