Beefy Boxes and Bandwidth Generously Provided by pair Networks
more useful options

Re: Code Inspections in Open Source projects

by john_oshea (Priest)
on Jan 17, 2008 at 10:58 UTC ( #662841=note: print w/replies, xml ) Need Help??

in reply to Code Inspections in Open Source projects

Personally, no, but the OpenBSD people seem quite taken with the idea, and Coverity have, presumably to show how good their software is at certain types of analysis.
  • Comment on Re: Code Inspections in Open Source projects

Replies are listed 'Best First'.
Re^2: Code Inspections in Open Source projects
by mpeg4codec (Pilgrim) on Jan 17, 2008 at 18:04 UTC
    As the link above states, the OpenBSD team continuously systematically audits their software. However, as the BSDs have so much cross-pollination in their codebases, it ends up being an interesting hybrid approach. I can recall a few instances where bugs that slipped by OpenBSD's security reviewers were caught by folks on the NetBSD team doing non-systematic general reviews.

    If nothing else, it proves that more eyes on a piece of code leads to more secure code, systematic reviews or not, which is one of the real strengths of open source.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://662841]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others perusing the Monastery: (10)
As of 2016-10-28 23:16 GMT
Find Nodes?
    Voting Booth?
    How many different varieties (color, size, etc) of socks do you have in your sock drawer?

    Results (387 votes). Check out past polls.