Description of problem: Coverity was run against qemu and many potential bugs were found. The ones in TCG code are not being examined by anyone, but still may need fixing. Version-Release number of selected component (if applicable): qemu 1.2.0-25.fc19 Additional info: TCG bug reports to follow ...
Created attachment 665081 [details] Coverity scan results Interesting bugs are the ones in tcg/translate.[ch] and target-*/
Was this intended to be filed against RHEL? IMO the fedora qemu tracker has the smallest audience for this kind of stuff, I'd say either RHEL or upstream qemu tracker is best. Is there any way we can kick off coverity against current rawhide qemu? It's much closer to the current state of qemu.git
(In reply to comment #2) > Was this intended to be filed against RHEL? Could be either, I guess. However I copied the Coverity bug list so it's visible by anyone (see attachment comment 1). > IMO the fedora qemu tracker has the smallest audience for this kind of > stuff, I'd say either RHEL or upstream qemu tracker is best. Well I guess we should fix this and feed the patches upstream. > Is there any way we can kick off coverity against current rawhide qemu? It's > much closer to the current state of qemu.git It's possible to run it using the Red Hat site license, but I can't document that here.
I should add the main reason I wanted this bug was so that I will get around to fixing the issues (since I'm the assignee) ..
Rich, has there been a coverity run against something more modern that we can forward upstream?
No, unfortunately 1.2.0 is still the latest that Coverity has been run on. However I will be able to run it on qemu git at some point (sooner rather than later).
This bug appears to have been reported against 'rawhide' during the Fedora 19 development cycle. Changing version to '19'. (As we did not run this process for some time, it could affect also pre-Fedora 19 development cycle bugs. We are very sorry. It will help us with cleanup during Fedora 19 End Of Life. Thank you.) More information and reason for this action is here: https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora19
To re-iterate, I don't think there's much value in tracking this in Fedora bugzilla. Those coverity results are public anyways, so if anything we should forward them to qemu-devel or stick them in launchpad where the TCG dev community can take a gander.