From: Petter Reinholdtsen <pere@hungry.com>
Date: Tue, 29 Apr 2014 12:07:33 +0000 (+0200)
Subject: New post.
X-Git-Url: https://pere.pagekite.me/gitweb/homepage.git/commitdiff_plain/022c8f9365faabe24ad6ceb5340f759e3860ee36?ds=sidebyside

New post.
---

diff --git a/blog/data/2014-04-29-gnash-coverity.txt b/blog/data/2014-04-29-gnash-coverity.txt
new file mode 100644
index 0000000000..20c055ca02
--- /dev/null
+++ b/blog/data/2014-04-29-gnash-coverity.txt
@@ -0,0 +1,41 @@
+Title: Half the Coverity issues in Gnash fixed in the next release
+Tags: english, web, multimedia, video
+Date: 2014-04-29 14:20
+
+<p>I've been following <a href="http://www.getgnash.org/">the Gnash
+project</a> for quite a while now.  It is a free software
+implementation of Adobe Flash, both a standalone player and a browser
+plugin.  Gnash implement support for the AVM1 format (and not the
+newer AVM2 format - see
+<ahref="http://lightspark.github.io/">lightspark</a> for that one),
+allowing several flash based sites to work.  Thanks to the friendly
+developers at Youtube, it also work with Youtube videos, because the
+Javascript code at Youtube detect Gnash and serve a AVM1 player to
+those users. :) Would be great if someone found time to implement AVM2
+support, but it has not happened yet.</p>
+
+<p>A few months ago, I started looking at
+<ahref="http://scan.coverity.com/">Coverity</a>, the static source
+checker used to find heaps and heaps of bugs in free software (thanks
+to the donation of a scanning service to free software projects by the
+company developing this non-free code checker), and Gnash was one of
+the projects I decided to check out.  Coverity is able to find lock
+errors, memory errors, dead code and more.  A few days ago they even
+extended it to also be able to find the heartbleed bug in OpenSSL.
+There are heaps of checks being done on the instrumented code, and the
+amount of bogus warnings is quite low compared to the other static
+code checkers I have tested over the years.</p>
+
+<p>Since a few weeks ago, I've been working with the other Gnash
+developers squashing bugs discovered by Coverity.  I was quite happy
+today when I checked the current status and saw that of the 777 issues
+detected so far, 374 are marked as fixed.  This make me confident that
+the next Gnash release will be more stable and more dependable than
+the previous one.  Most of the reported issues were and are in the
+test suite, but it also found a few in the rest of the code.</p>
+
+<p>If you want to help out, you find us on
+<ahref="https://lists.gnu.org/mailman/listinfo/gnash-dev">the
+gnash-dev mailing list</a> and on
+<ahref="irc://irc.freenode.net/#gnash"the #gnash channel on
+irc.freenode.net IRC server</a>.</p>