NEWS: mention Coverity bug fixes

Paul Koning pkoning@equallogic.com
Wed Aug 22 16:44:00 GMT 2007


>>>>> "Dave" == Dave Korn <dave.korn@artimi.com> writes:

 Dave> On 22 August 2007 16:51, Ian Lance Taylor wrote:
 >> msnyder@sonic.net writes:
 >> 
 >>> + * 37 Coverity issues fixed in bfd, including potential static
 >>> array + overruns, null pointer dereferences and use of malloc
 >>> buffer after + free.  Coverity generously runs its static
 >>> analysis suite on the + GNU tools without charge.
 >>  It's nice of Coverity to run these analyses for us, but do we
 >> feel OK about advertising non-free software in a GNU package?
 >> 
 >> Ian


 Dave> Are we advertising their software, or are we giving credit to
 Dave> the organisation for the voluntary work they've done for us?  I
 Dave> feel basically OK about credit where credit's due.

 Dave> For comparison, IBM and HP are two firms who make lots of
 Dave> proprietary software, yet have acknowledgements of their
 Dave> contributions to the gcc project listed at
 Dave> http://gcc.gnu.org/news.html

That makes sense to me.

     paul



More information about the Binutils mailing list