Posted Feb 15, 2003 22:00 UTC (Sat) by error27
Parent article: Comparing free and proprietary software defect rates
Thanks for the Smatch plug. :) The website is smatch.sf.net and since the article mentions null pointer dereferences the results for the dereference testing of 2.5.60 are here.
Smatch is too new to have had much influence yet. The Stanford Checker has made a measurable difference on the number of kernel errors. Unfortunately, their bug database only goes up to 2.4.1. They have released newer lists of bugs to lkml but when I released bug lists it was not as effective as a database (especially for long lists).
I am excited about the possibilities for Smatch to improve the kernel. The code for the Smatch derefence check about 130 lines long. A lot of that was cut and paste. Any of the other four checks should be possible with Smatch as well.
to post comments)