[Python-Dev] Coverity scan

[Stefan Krah]

Christian Heimes <lists at cheimes.de> wrote:
> Coverity has some new features like notification of new possible issue
> and build steps. We could create a new mailing list for coverity scan
> builds and results, The mailing list should be exclusive to core devs as
> the issues may be security relevant.

The mailing list would be nice especially if we could get the results in
verbose text form, but I don't know if that's possible.


BTW, do we keep all buffer overruns secret or can we post them on the tracker
if it's an off-by-one and unlikely to be exploitable?


Stefan Krah