(free) bug finding software for Forge

[zyxwyvu]

I haven't posted here before, but I've played quite a bit of Forge, and taken a look at the code.

I'm an employee at Coverity, and we sell software that analyzes code for bugs through static analysis. Since I think this is a really cool project that also has some significant bug issues, I want to help out by letting those involved with Forge use our software. We have a project called Scan (http://scan.coverity.com/) where we analyze open source code for free, and Forge could be included.

I think this is a pretty cool opportunity for Forge, and I'll do the work of getting things set up to grab SVN commits and analyze them automatically (unless someone else would like to do so). We would provide a login to a server here where you could view any defects we find. To give you an idea of how many, I've been analyzing the recent SVN commits, and there are several hundred bugs found.

So, to the people who work on the code for Forge (or want to), are you interested?

I figure this might sound a bit sketchy to some people, so feel free to ask me any questions about it.

[DennisBergkamp]

This sounds very cool! I have been using findbugs on the forge source from time to time, which also finds hundreds of bugs in Forge's code (only bothered to fix the major ones such as infinite loops and performance-related bugs, I left the "bad style" and "bad programming practices" categories mostly untouched).
Anyway, this would be an awesome opportunity indeed... since you are able to check out SVN releases already, do you need anything from our side to set this up?

[slapshot5]

Definitely interested in this. Thanks for bringing this up!

-slapshot5

[Huggybaby]

Make it so!

[zyxwyvu]

Great! I probably won't need anything from your side to set it up. I'm just waiting on our Scan guy right now. I'll let everyone know once I get it up and running.

[friarsol]

It's always that dang Scan guy that slow things down.

[Huggybaby]

haha Indeed! NTM him stealing my parking spot every morning.

[friarsol]

Has anything ever happened with this? It was about a month ago, but it'd be nice to see where we can clean things up since we're at the beginning of a cycle.

[Hellfish]

My guess is either Forge clashed with their requirement that the project be licensed as open source (which it ostensibly is, but no license is specified anywhere) or that the Coverity folks were turned off by the very gray legal area you must admit forge inhabits.

[zyxwyvu]

Hey guys, I'm sorry for making you wait. I didn't anticipate that this would take so long. Unfortunately, I'm waiting for someone else, so it's going at their pace. The plan is still on though, so eventually this should work out!

Once it does get set up (hopefully soon!), I will let you guys know.

[Hellfish]

Oh, well I stand corrected then. Good thing, to.