Open-source bug hunt results posted

Open-source bug hunt results posted

am 11.03.2006 17:37:11 von Imhotep

"Coverity Inc. of San Francisco has released the results of a Homeland
Security Department-funded bug hunt that ranged across 40 popular
open-source programs. The company found less than one-half of one bug per
thousand lines of code on average, and found even fewer defects in the most
widely used code, such as the Linux kernel and the Apache Web server."

http://www.gcn.com/online/vol1_no1/40053-1.html

Re: Open-source bug hunt results posted

am 11.03.2006 20:50:54 von ynotssor

"Imhotep" wrote in message
news:LuGdne8UPPQkYY_ZRVn-rQ@adelphia.com

> "Coverity Inc. of San Francisco has released the results of a Homeland
> Security Department-funded bug hunt that ranged across 40 popular
> open-source programs. The company found less than one-half of one bug
> per thousand lines of code on average, and found even fewer defects
> in the most widely used code, such as the Linux kernel and the Apache
> Web server."

"The cleanest program was XMMS, a Unix-based multimedia application. It had
only six bugs in its 116,899 lines of code, or .51 bugs per thousands lines
of code. "

Hmmm, one has to question the entire validity of a study that presents an
order of magnitude error in that summary calculation alone ...

Re: Open-source bug hunt results posted

am 11.03.2006 20:57:34 von ynotssor

I quoted and wrote in message news:47go1vFfi1vmU1@individual.net

>> "Coverity Inc. of San Francisco has released the results of a
>> Homeland Security Department-funded bug hunt ...
>
> "The cleanest program was XMMS, a Unix-based multimedia application.
> It had only six bugs in its 116,899 lines of code, or .51 bugs per
> thousands lines of code. "
>
> Hmmm, one has to question the entire validity of a study that
> presents an order of magnitude error in that summary calculation
> alone ...

Your tax dollars at work. The dumbing-down and fattening-up of American
society continues unabated.

Re: Open-source bug hunt results posted

am 11.03.2006 22:23:13 von Volker Birk

In comp.security.misc ynotssor wrote:
> > "Coverity Inc. of San Francisco has released the results of a Homeland
> > Security Department-funded bug hunt that ranged across 40 popular
> > open-source programs. The company found less than one-half of one bug
> > per thousand lines of code on average, and found even fewer defects
> > in the most widely used code, such as the Linux kernel and the Apache
> > Web server."
> "The cleanest program was XMMS, a Unix-based multimedia application. It had
> only six bugs in its 116,899 lines of code, or .51 bugs per thousands lines
> of code. "
> Hmmm, one has to question the entire validity of a study that presents an
> order of magnitude error in that summary calculation alone ...

If this study is measuring that way, it is completely ridiculous. To
test if something is a bug, you have to compare behaviour to specification.

But if a specification is not there, then you cannot compare in such a way
at all. Apart from the fact, that such bug per loc nonsense is ridiculous
anyways.

Yours,
VB.
--
Wenn Du "Ich sehe die Mathematik als einzigen Bereich an, wo es klare
Beweise gibt." und "Ich fuehle mich in einem Anzug unwohl." als Aussagen
mit aequivalentem Meinungsinhalt betrachtest, hast Du mit Deinem Gleichnis
recht. (Michail Bachmann zu Thomas Wallutis in d.a.s.r)

Re: Open-source bug hunt results posted

am 12.03.2006 01:05:22 von unruh

"ynotssor" writes:

>"Imhotep" wrote in message
>news:LuGdne8UPPQkYY_ZRVn-rQ@adelphia.com

>> "Coverity Inc. of San Francisco has released the results of a Homeland
>> Security Department-funded bug hunt that ranged across 40 popular
>> open-source programs. The company found less than one-half of one bug
>> per thousand lines of code on average, and found even fewer defects
>> in the most widely used code, such as the Linux kernel and the Apache
>> Web server."

>"The cleanest program was XMMS, a Unix-based multimedia application. It had
>only six bugs in its 116,899 lines of code, or .51 bugs per thousands lines
>of code. "

>Hmmm, one has to question the entire validity of a study that presents an
>order of magnitude error in that summary calculation alone ...

Could of course have simply been a typo

Re: Open-source bug hunt results posted

am 13.03.2006 07:43:03 von unknown

G'day:

"ynotssor" wrote in message
news:47godqFfg75cU1@individual.net...
>
> Your tax dollars at work. The dumbing-down and fattening-up of American
> society continues unabated.
>

Not sure about the society as a whole, but regarding the taxpayers' money -
absolutely!


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

Re: Open-source bug hunt results posted

am 15.03.2006 23:51:09 von Imhotep

ynotssor wrote:

Have you ever gone through code? If you did I think you would question it...

> "Imhotep" wrote in message
> news:LuGdne8UPPQkYY_ZRVn-rQ@adelphia.com
>
>> "Coverity Inc. of San Francisco has released the results of a Homeland
>> Security Department-funded bug hunt that ranged across 40 popular
>> open-source programs. The company found less than one-half of one bug
>> per thousand lines of code on average, and found even fewer defects
>> in the most widely used code, such as the Linux kernel and the Apache
>> Web server."
>
> "The cleanest program was XMMS, a Unix-based multimedia application. It
> had only six bugs in its 116,899 lines of code, or .51 bugs per thousands
> lines of code. "
>
> Hmmm, one has to question the entire validity of a study that presents an
> order of magnitude error in that summary calculation alone ...

Re: Open-source bug hunt results posted

am 15.03.2006 23:53:46 von Imhotep

ynotssor wrote:

BS! This has been need for some time. Since the overall quality of software
has been "dumbed down". Oh indeed, let's look at how software involves our
lives: Aircontroller software, Banking software, maybe software quality
should have been taken more seriously along time ago?

Im

> I quoted and wrote in message news:47go1vFfi1vmU1@individual.net
>
>>> "Coverity Inc. of San Francisco has released the results of a
>>> Homeland Security Department-funded bug hunt ...
>>
>> "The cleanest program was XMMS, a Unix-based multimedia application.
>> It had only six bugs in its 116,899 lines of code, or .51 bugs per
>> thousands lines of code. "
>>
>> Hmmm, one has to question the entire validity of a study that
>> presents an order of magnitude error in that summary calculation
>> alone ...
>
> Your tax dollars at work. The dumbing-down and fattening-up of American
> society continues unabated.