Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.python > #8262

Re: static analysis and other tools for checking Python code

Path csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From Paul Wise <pabs@debian.org>
Newsgroups linux.debian.maint.python
Subject Re: static analysis and other tools for checking Python code
Date Thu, 03 Mar 2016 01:10:02 +0100
Message-ID <r8p06-7eU-13@gated-at.bofh.it> (permalink)
References <r85E5-1TO-1@gated-at.bofh.it> <r8fN7-l3-3@gated-at.bofh.it>
X-Mailbox-Line From debian-python-request@lists.debian.org Thu Mar 3 00:07:08 2016
Old-Return-Path <paul.is.wise@gmail.com>
X-Amavis-Spam-Status No, score=-7.697 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate:hard: -7
Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to; bh=akowJrqM1RsxJvq1zMrqoArGo242bwviqlPauT73p8A=; b=X36zJsDE9XkCMZv5weUIIqhA7EDg1I3Eg/6fljIgjQby0ciQ6QSq0cIGE3q7YHusMd 3PM6MgpWzWIsvGBqW0gBIqYhVlAxS82JzkjzRj4rZhXa4M8atzcLkyDMeVYhibBdtEks 068h9EC8AvxkK9gkL/UcS0V7rDX9ymTKPiToQE991HnfUnhBK1/b773cazM0J8hYa9xy MoZbpPvEeL28W8KnmaiqopKiOurbuey1JFhOAD3UZl3T2ZkEO+qCknCsvcfORY6roz1W bfuavlYG5AVHIeD48j8XpjAN3PmNM4qMM4Z/Z+E44wemwEW7RItUdJXEBvOR3yVgdKPu jQAg==
X-Google-Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to; bh=akowJrqM1RsxJvq1zMrqoArGo242bwviqlPauT73p8A=; b=aT0QED3QRE9TSwEkudrWWkLECjF3Enn4TRD/VmV8PiXzrvDXq24mar7HKhlYLmpReG +qg+DDffztgPRYyS06D6xUAKaXUI93Ki1aJqiBWTaYAmapRCZPhqeIsgUrWDZceehqTZ 1iEPg47qscFbfaIl8qUvoF5og4b4qte+hflah+nERzvjNrJk6elGsGoVcHMBUEQER7tG wjE1qRLS8J5GqsIwKCYy89bvTkcfBBGJvOjS2M13cFCxviZczHodK1bH6bU2biyvELI8 +E84/Me1dyXkZt4stIHQIJYjONY/0Pv06vHMfDHzay4tR51e3sVLU4LAIF6TyteTl02p oQAg==
X-Gm-Message-State AD7BkJLsJs71Ox8L/wv09mUxbYmlwWo3ExPzY8aY1USOGxA2hoOJDfpAkRKQ5l8Y4oL7tFge7aiEquc+P4mh9g==
MIME-Version 1.0
X-Received by 10.194.71.135 with SMTP id v7mr28618837wju.135.1456963612183; Wed, 02 Mar 2016 16:06:52 -0800 (PST)
Sender robomod@news.nic.it
X-Google-Sender-Auth cLW5tetOEveb-_XswG5GZE9n_UQ
Content-Type text/plain; charset=UTF-8
X-Mailing-List <debian-python@lists.debian.org> archive/latest/13589
List-ID <debian-python.lists.debian.org>
List-URL <https://lists.debian.org/debian-python/>
List-Archive https://lists.debian.org/msgid-search/CAKTje6FQ1STcN3JDVtDvQ_o6cJ=tsr+dqWQN+G0g5HvTXQSjFg@mail.gmail.com
Approved robomod@news.nic.it
Lines 21
Organization linux.* mail to news gateway
X-Original-Date Thu, 3 Mar 2016 08:06:52 +0800
X-Original-Message-ID <CAKTje6FQ1STcN3JDVtDvQ_o6cJ=tsr+dqWQN+G0g5HvTXQSjFg@mail.gmail.com>
X-Original-References <CAKTje6Hjp+RA666ey=mi7mwsTnxOor2LS85pSU7krziM0Z6=Yw@mail.gmail.com> <20160302132331.GB20628@volans.logilab.fr>
X-Original-Sender paul.is.wise@gmail.com
Xref csiph.com linux.debian.maint.python:8262

Show key headers only | View raw


On Wed, Mar 2, 2016 at 9:23 PM, Nicolas Chauvat wrote:

> Maybe add pylint?

As I understand it:

pylint runs code from the source tree so it isn't suitable for running
by default as that could be a security issue for people reviewing
potentially untrusted code.

pylint isn't able to be run automatically, it needs a human to come up
with the right command-line.

c-a-t-t could certainly print a suggestion to run pylint like it does
for fuzzers like afl/zzuf.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Back to linux.debian.maint.python | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-02 04:30 +0100
  Re: static analysis and other tools for checking Python code Scott Kitterman <debian@kitterman.com> - 2016-03-02 05:40 +0100
    Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-02 06:00 +0100
  Re: static analysis and other tools for checking Python code Nicolas Chauvat <nicolas.chauvat@logilab.fr> - 2016-03-02 15:20 +0100
    Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-03 01:10 +0100
      Re: static analysis and other tools for checking Python code "Paul R. Tagliamonte" <paultag@gmail.com> - 2016-03-03 01:30 +0100
      Re: static analysis and other tools for checking Python code Nicolas Chauvat <nicolas.chauvat@logilab.fr> - 2016-03-03 13:00 +0100
        Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-04 06:10 +0100
          Re: static analysis and other tools for checking Python code Nicolas Chauvat <nicolas.chauvat@logilab.fr> - 2016-03-04 10:30 +0100
            Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-04 14:40 +0100
              Re: static analysis and other tools for checking Python code Nicolas Chauvat <nicolas.chauvat@logilab.fr> - 2016-03-04 16:20 +0100
                Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-05 04:20 +0100
                Re: static analysis and other tools for checking Python code Nicolas Chauvat <nicolas.chauvat@logilab.fr> - 2016-03-05 15:10 +0100
                Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-06 10:20 +0100
  Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-03 01:40 +0100
    Re: static analysis and other tools for checking Python code Jeremy Stanley <fungi@yuggoth.org> - 2016-03-03 01:50 +0100
    Re: static analysis and other tools for checking Python code Daniel Stender <stender@debian.org> - 2016-03-04 15:40 +0100
      Re: static analysis and other tools for checking Python code Paul Wise <pabs@debian.org> - 2016-03-05 04:10 +0100
  Re: static analysis and other tools for checking Python code Jeremy Stanley <fungi@yuggoth.org> - 2016-03-03 01:40 +0100

csiph-web