Software Quality Binutils

[Christoph Hazott <Christoph dot Hazott at live dot de>]

Hi,


first of all I quickly want to introduce myself. My name is Christoph Hazott, I life in Austria but am originally from Germany. Currently I'm employed at Infineon as Test Development Engineer for RADAR Products and made my MSc. Degree in Embedded Systems Design at the University of Applied Sciences Upper Austria in 2012.

I'm very fond of Free Software but have to say that due to (in my opinion) software entropy with such a high amount of contributors and functionality the tools have become smelly.


I sat down now for one day and made a static code analysis of the binutils (because they are the major part of the toolchain). I uploaded the code of version 2.30.90 (last snapshot) to my public GitHub (https://github.com/h4z4rt/binutils) and connected it to sonar. In a virtual machine I executed the scanner with a Linux From Scratch configuration and the results where  uploaded to https://sonarcloud.io/organizations/h4z4rt-github/projects  and can be viewed there.



The results show 535 Bugs, 804 Vulnerabilities, 8.5k Code Smells and > 11.7% duplications.



Because of this I would like to contribute to the binutils project by setting up an infrastructure for static code analysis (and further...).

I would be happy if you would liketo have me to contribute to the binutils like this.



Looking forward to your supply.



Regards,



Christoph



PS: I'm not fixed on any code analysis tools I just used sonar because I personally made the best experience with it.