-
Notifications
You must be signed in to change notification settings - Fork 26
MDBF-143: Add infer #835
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: dev
Are you sure you want to change the base?
MDBF-143: Add infer #835
Conversation
822e6bb to
b795254
Compare
b795254 to
b6cbeca
Compare
ba8e232 to
e484be1
Compare
e484be1 to
d26d94f
Compare
d26d94f to
9f4c334
Compare
|
Maybe the specifications have already been set, but after analyzing the script, I was wondering if the following flow might be simpler? Still, I believe you’ve already achieved the maximum efficiency in terms of time and resource consumption with the current script, even though it’s a bit difficult for me to understand it completely at the moment. (which is not a blocker of course I just need your guidance) With the above workflow you don't need the bind mounts anymore at the expense of:
|
1512189 to
9cd42b6
Compare
not totally, its hopefully a bit simpler now
I did try. The incremental builds aren't saving much in capture, and not sure how much in analyse. At some point if no decent incremental results are there that could be removed leaving just the need for X main branch saves. |
9cd42b6 to
56697ad
Compare
fauust
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agree with @RazvanLiviuVarzaru, it's a bit complex to understand what the big picture is, probably because I don't know the tool. I'll probably need to read the infer doc next and come with (maybe) some design arguments.
Small changes requested for consistency mostly.
|
|
||
| if [ ! -d bld ]; then | ||
| mkdir bld | ||
| build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
?
d4c0ecc to
474b2e4
Compare
|
Added a worker: 4f32380 |
bae2dfe to
4f32380
Compare
2295992 to
89e6f47
Compare
|
@grooverdan One thing I've noticed is that I tried If there aren't any methods to force it show some output, I can only increase the step Side note: |
11db0bb to
93d7342
Compare
|
@grooverdan please check 702d7ce, let me know if I missed anything Here are two runs after this commit:
Although I don't see the issue I've introduced, in the second run. I think it's best to not show the diff in the output because it's producing too much logs |
4dc8b44 to
702d7ce
Compare
This preforms static analysis on the MariaDB codebase
by maintaining a git source repository as a shared volume.
Because static analysis takes time, a lot of time, there
is a shared cache volume to store build results from main
branches of the codebase so that as much incremental usage
can occur.
Infer runs in to phases, a capture and an analyze.
Infer output are in a result-dir this contains:
* report.json - what infer tools use
* report.txt - the human readable version of this
* capture.db - the sqlite3 version presentation of captured files and the
relation to functions definitions.
* results.db - the analyze phase outputs
Of these, the report.json is desirable as the long term record of vulnerabilities.
and the main_diff containing the difference from the last
main X.Y branch commit.
702d7ce to
e4b4391
Compare

First draft. Seeing if github actions can handle building the entire infer from scratch.
Their last release 1.2.0 was in June 2024 and its actively developed.