python (65.2k questions)

javascript (44.3k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (13k questions)

Questions - coverity

Can we get the Coverity report specific to only one issue like URL Manipulation Error?

I am using cov-capture, and cov-analyze to get the reports in my VM. Can anyone help in getting the command to run the cov-analyze only for getting specific errors? Example: There are various XML file...
test-img

Nishi Agarwal

rest

static-analysis

coverity

Votes: 0

Answers: 1

Latest Answer

To run the analysis with only a single checker enabled, use the --disable-default and --enable options like this: $ cov-analyze --disable-default --enable CHECKER_NAME ... CHECKER_NAME is the all-cap...
test-img

Scott McPeak

TAINTED_SOURCE - os_command_sink

Further to Tainted_source JAVA, I want to add more information regarding the error os_command_sink I am getting. Below is the section of code that's entry point of data from front end and marks parame...
test-img

Eager

java

rest

coverity

Votes: 0

Answers: 1

Latest Answer

The main issue is that the code, as it currently stands, is insecure. To summarize the Coverity report: entityType comes from an HTTP parameter, hence is under attacker control. entityType is concat...
test-img

Scott McPeak

Executing coverity scan on go project

Coverity version: 2020.09 go version go1.14.15 Coverity build command cov-build --dir coverity_dir go build source.go [WARNING] No files were emitted. This may be due to a problem with your configurat...
test-img

Roger Gonsalves

go

coverity

Votes: 0

Answers: 0

Coverity Static Analysis UNINIT Error in C++

I'm new to Coverity and lambdas and am trying to figure our what's causing the UNINIT error of "creating a temporary" and "using uninitialized value <temporary>.__f_.__buff_ when ...
test-img

Hawkie

c++

lambda

static-analysis

coverity

Votes: 0

Answers: 0

Posts

Questions

Blogs

Jobs