News for hackers. Stuff that matters.
Re:Bugs found in GCC with the help of PVS-Studio by 0xmohit on Friday September 02, 2016 @11:33PM (#12417577)
I'd have loved to see references to actual GCC bug reports. Did I miss those in the article?

Thankfully, the world is changing. You have languages where variables are immutable by default or can be declared so that would prevent issues as http://www.viva64.com/en/d/0108/

Maybe gcc should do better for static analysis of a program. Expressions like `a && a` or `a == 1 || a != 2` should be caught easily.

Re:Bugs found in GCC with the help of PVS-Studio by AndreyKarpov on Saturday September 03, 2016 @01:36AM (#12417915)
Re:Bugs found in GCC with the help of PVS-Studio by 0xmohit on Saturday September 03, 2016 @01:47AM (#12417943)
Re:Bugs found in GCC with the help of PVS-Studio by mtkd on Saturday September 03, 2016 @05:53AM (#12418551)
a == 1 || a != 2 needs a warning but it's not necessarily a bug

sometimes I may keep overlapping expressions in a statement to remind me of the triggers I'm looking for at this point - and would likely use some meaningful constant names for the 1 and 2

statements aren't just logic - they're often documentation too - especially on code you might not look at again for months

I used to have many arguments with a professor whose code I was working on - he would factor out everything in an expression - removing all the parentheses and rely on operator precedence - it was often impenetrable (for me) - so I'd unpack it, wrap parentheses everywhere, change single letter vars to meaningful ones etc. - he'd be in my office an hour later ranting

Re:Bugs found in GCC with the help of PVS-Studio by 0xmohit on Saturday September 03, 2016 @06:14AM (#12418604)
> a == 1 || a != 2 needs a warning

Yes, it needs a warning because it's kind of obvious that there is something amiss about this expression. Only the author could tell what was specifically wrong.

Re:Bugs found in GCC with the help of PVS-Studio by raverbashing on Saturday September 03, 2016 @06:33AM (#12418647)
Yes

I would advocate for the maintenance of both expressions if the comparison is tricky

If this is a hot path that must absolutely be optimized then a comment explaining the conditions is needed

And of course, the != 2 question might change (either because of a bug or logic change) but the == 1 might still be valid, however, if you took the first one your change will break the code

Re:Bugs found in GCC with the help of PVS-Studio by i_have_to_speak on Saturday September 03, 2016 @12:28AM (#12417730)
If you're suggesting that discovery of a bug in a popular open source project holds the discoverer up to a moral responsibility of reporting it -- well then, maybe you are guilty too!
Re:Bugs found in GCC with the help of PVS-Studio by rcthompson on Saturday September 03, 2016 @12:53AM (#12417806)
There's no obligation to report a bug you've found, of course. But if you've taken the time to write a blog post about it, one would hope you've also taken the time to directly notify the software authors as well.
Re:Bugs found in GCC with the help of PVS-Studio by i_have_to_speak on Saturday September 03, 2016 @01:17AM (#12417867)
But if you hadn't taken as much time -- say you've only come across a well written blog post clearly describing the bug -- would you report it?
Re:Bugs found in GCC with the help of PVS-Studio by 0xmohit on Saturday September 03, 2016 @01:42AM (#12417933)
Given (1) the blog post, (2) the author posted the blog link on HN, I assumed that the bugs would have reported upstream.

If it were a blog describing a 0-day vulnerability in a given software, I wouldn't have assumed that it would have been reported.