git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Fwd: New Defects reported by Coverity Scan for git

From
Junio C Hamano <gitster@pobox.com>
Date
Oct 20, 2016, 17:50 UTC
Message-ID
<xmqqshrqhpua.fsf@gitster.mtv.corp.google.com>
In-Reply-To
<CAGZ79kabVPhp0_z-e_4jJOFq+jzSE2SsgmFuY-2RUgrEviGKyA@mail.gmail.com>
Stefan Beller <sbeller@google.com> writes:
Show 6 quoted lines
> Not sure what triggered the new finding of coverity as seen below as the
> parse_commit() was not touched. Junios series regarding the merge base
> optimization touches a bit of code nearby though.
>
> Do we want to replace the unchecked places of parse_commit with
> parse_commit_or_die ?

The reason parse_commit() would fail at this point would be because the repository is corrupt, I do not think it would hurt to do such a change.

I agree that it is curious why it shows up as a "new defect", though.

By the way, do you know who is managing the service on our end (e.g. approving new people to be "defect viewer")? The site seems to think I have the power to manage others' subscription, which I do not think I have (I do not go to the site myself). As it spewed quite a many false positives into my mailbox in the past, I do not pay very close attention to these reports these days, but I still read the e-mailed reports every once in a while.

Thanks.
Previous: Stefan BellerNext: Stefan Beller
Message 2 of 9 in “Fwd: New Defects reported by Coverity Scan for git”
  1. Stefan BellerOct 20, 2016
  2. Junio C HamanoOct 20, 2016
  3. Stefan BellerOct 20, 2016
  4. Junio C HamanoOct 20, 2016
  5. commit parsing: replace unchecked parse_commit by parse_commit_or_dieStefan Beller, Oct 20, 2016
  6. Stefan BellerOct 20, 2016
  7. Jeff KingOct 20, 2016
  8. Junio C HamanoOct 20, 2016
  9. Jeff KingOct 20, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.