Examples of errors detected in various open-source projects

http://www.codeproject.com/KB/cpp/errors-in-open-source.aspx#xx4067556xx

by koshatnica • 15 years ago

49 16 15 years ago

danso• 15 years ago

Fascinating...on one hand, it's disheartening to see the vast array of errors that can go undetected and how easy they are missed even in retrospect. On the other, it's nice to know I'm not the only one :)

mbq• 15 years ago

...and thanks to the fact those are Open Source projects they can be now easily fixed.

pavel_lishin• 15 years ago

Yes, but not necessarily easily integrated into the next release. You can fix it for yourself, but if the project isn't very well maintained, or if the maintainer rejects your patch, etc., etc...

dexen3• 15 years ago

That's why some distros roll packages with bugfix patches applied even before upstream maintainers include those in official releases.

Even better, if a particular bug is a show-stopper at your organization, you can build fixed package and deploy it to your local package repository on a short notice; machines can then obtain the update automagically.

swatkat2• 15 years ago

Article deleted? Here's the Google cache: http://webcache.googleusercontent.com/search?q=cache:www.cod...

AndreyKarpov2• 15 years ago

Link: http://www.viva64.com/en/a/0077/

dexen3• 15 years ago

The mandatory Google Cache link: http://webcache.googleusercontent.com/search?q=cache%3Ahttp%...

...cause the article is marked as `deleted' now :-(

route66• 15 years ago

http://www.viva64.com/en/a/0077/ seems to have been the original article anyway.

graiz• 15 years ago

Article seems to be a rip-off from an Intel article. Original here: http://software.intel.com/en-us/articles/90-errors-in-open-s...

mattmanser• 15 years ago

Nah, it's was the same guy that posted that. It's an infomercial, not a real article, perhaps codeproject took it down when they realised.

Though kinda interesting anyway if a little blandly written.

swatkat2• 15 years ago

Same author. Looks more like a repost.

mynegation• 15 years ago

I worked for static analysis company.

I am happy to see this kind of analyses popping up here and there. As computers become more powerful, you can do more sophisticated checks.

One of the biggest problems in static analysis is false positives - reports about potential problems which are not relevant for one reason or another, and false positive rate has huge impact on ROI.

Unfortunately, aside from an interface element for triage, article does not mention or link to the article that describes how they are handling false-positives problem in the analysis.

dexen3• 15 years ago

The article does not mention whether the bugs have been reported and rectified in subsequent releases, either.

Since at least some of the bugs found are segfault/data-corruption/wrong-query-results level ones[†], one would assume they'd get found out quite soon.

For me, when picking software for a new project, an important metric is how fast bugs get fixed upstream.

[†] I just love how `ones' is a perfectly reasonable expression in english. `Would that it were so in our programming languages', with apologies to Alan Perlis ;-)

AndreyKarpov2• 15 years ago

Article deleted. New link: http://www.viva64.com/en/a/0077/

mVChr• 15 years ago

Also mirrored at: http://software.intel.com/en-us/articles/90-errors-in-open-s...

kamagmar• 15 years ago

Reminds me of this article on how hard it is to convince companies to use static analysis:

http://cacm.acm.org/magazines/2010/2/69354-a-few-billion-lin...

Examples of errors detected in various open-source projects

Related Stories