Beefy Boxes and Bandwidth Generously Provided by pair Networks
Problems? Is your data what you think it is?

Re: Code Inspections in Open Source projects

by john_oshea (Priest)
on Jan 17, 2008 at 10:58 UTC ( #662841=note: print w/replies, xml ) Need Help??

in reply to Code Inspections in Open Source projects

Personally, no, but the OpenBSD people seem quite taken with the idea, and Coverity have, presumably to show how good their software is at certain types of analysis.
  • Comment on Re: Code Inspections in Open Source projects

Replies are listed 'Best First'.
Re^2: Code Inspections in Open Source projects
by mpeg4codec (Pilgrim) on Jan 17, 2008 at 18:04 UTC
    As the link above states, the OpenBSD team continuously systematically audits their software. However, as the BSDs have so much cross-pollination in their codebases, it ends up being an interesting hybrid approach. I can recall a few instances where bugs that slipped by OpenBSD's security reviewers were caught by folks on the NetBSD team doing non-systematic general reviews.

    If nothing else, it proves that more eyes on a piece of code leads to more secure code, systematic reviews or not, which is one of the real strengths of open source.

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://662841]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others having an uproarious good time at the Monastery: (1)
As of 2021-09-26 13:33 GMT
Find Nodes?
    Voting Booth?

    No recent polls found