Coverity Finds Fewer Defects in Open Source Software
The code analysis specialists Coverity attest to a quality improvement in the open source software they tested.
Coverity investigates code from diverse open source applications in conjunction with the U.S. Department of Homeland Security. The agency sees the investigation and the resulting improvement in quality as important because more and more state agencies are relying on free and open software.
Projects can post a request for analysis on the Coverity website and then provide the source code. Among the projects are Firefox, PHP and Linux itself. Coverity's report reveals that finding around 11,000 defects in 2009 meant a 16% reduction over the last year.
Coverity's defect ranking list for 2009. Source: Coverity
Coverity categorizes the projects into rankings based on the quality of their coce. So far only four projects have achieved the highest ranking, Rung 3, Samba, tor, OpenPAM and Ruby. By Coverity's account, they analyzed over 60 million lines of code since the start of their investigation in 2006. The method they use is static analysis, where the code is read directly for security and performance issues without actually running the app. So it tests not so much how it runs but how the code is structured and how it might lead to a faulty sequence of operations.
The full Coverity report for 2009 is available in PDF format.
Issue 210/2018
Buy this issue as a PDF
News
-
Red Hat Enterprise Linux 7.5 Released
The latest release is focused on hybrid cloud.
-
Microsoft Releases a Linux-Based OS
The company is building a new IoT environment powered by Linux.
-
Solomon Hykes Leaves Docker
In a surprise move, Solomon Hykes, the creator of Docker has left the company.
-
Red Hat Celebrates 25th Anniversary with a New Code Portal
The company announces a GitHub page with links to source code for all its projects
-
Gnome 3.28 Released
The latest GNOME rolls out with better contact management and new features for handling virtual machines.
-
Install Firefox in a Snap on Linux
Mozilla has picked the Snap package system to deliver its application to Linux users.
-
OpenStack Queens Released
The new release comes with new features for mission critical workloads.
-
Kali Linux Comes to Windows
The Kali Linux developers even managed to run full blown XFCE desktop via WSL.
-
Ubuntu to Start Collecting Some Data with Ubuntu 18.04
It will be an ‘opt-out’ feature.
-
CNCF Illuminates Serverless Vision
The Cloud Native Computing Foundation announces a paper describing their model for a serverless ecosystem.