Daniel Marjamäki: Contributing to open source static analysis

[@AndreasToth]

Perhaps I missed that part of the presentation, but is the Debian source that is used for checking Cppcheck the exact same source each time? If not, it really must be for the output from Cppcheck to be of any use and be comparable to past runs.

[@danielmarjamaki1834]

We always check latest Debian source code. We do not compare against old output because as you say that would not work well. The latest source package is downloaded from debian repo then we run both latest cppcheck release and latest cppcheck head on that code. and compare those outputs.