Comment Re:No plans for LLVM (Score 1) 102
...is a really good dynamic analyzer. Again, not nearly the same.
Comment Re:No plans for LLVM (Score 2) 102
Because GCC doesn't have a static analyzer (you do analyze your code, right?) LLVM's analyzer (Clang's scan-build) is very good. Visual C++'s analyzer was crap a few releases ago but even it is getting better. I like GCC but it has a lot of catching up to do in this regard. And no, "-Wall" isn't nearly the same.
Comment Re:All? (Score 1) 576
The outstanding absentee ballots are from areas that lean Obama, which is why most places have at least unofficially called the state for Obama.
Comment Re:What's the clear advantage of LLVM? (Score 2) 360
It has a pretty good static analyzer.
Comment Re:Hardly surprising... (Score 4, Interesting) 57
The barrier for GSM is getting lower every day so it wouldn't surprise me if bugs like this start showing up more often.
Submission + - ntpd timebomb on modern linuxes (serverfault.com)
Bronster writes: "On recent linux kernels, ntpd prepares the kernel for the upcoming insertion of a leapsecond — which under some circumstances can trigger a livelock. At least Redhat and Debian users are confirmed to be at risk on busy servers."
Submission + - Leapsecond is here! Are your systems ready or going to crash? (redhat.com) 1
Tmack writes: The last time we had a leapsecond, sysadmins were taken a bit by surprise when a random smattering of systems locked up (including Slashdot itself) due to a kernel bug causing a race condition specific to the way leapseconds are handled/notified by ntp. The vulnerable kernel versions (prior to 2.6.29) are still common amongst older versions of popular distributions (Debian Lenny, RHEL/Centos 5) and embeded/black-box style appliances (Switches, load balancers, spam filters/email gateways, NAS devices, etc). Several vendors have released patches and bulletins about the possibility of a repeat of last time. Are you/your team/company ready? Are you upgraded or are you going to bypass this by simply turning off NTP for the weekend?
Comment Re:If my work inbox is any indication... (Score 4, Funny) 314
We're talking about real email that's connected to the outside world here, not your Compuserve account.
Comment Re:Wait, what now? (Score 1) 462
Their C/C++ compiler is pretty good. Their static analyzer (which requires one of the full-frontal editions of Visual Studio) is crap compared to Clang's scan-build or cppcheck.
Submission + - Nmap 6 Released! (nmap.org)
Chankey Pathak writes: "The Nmap Project is pleased to announce the immediate, free availability of the Nmap Security Scanner version 6.00 from http://nmap.org/. It is the product of almost three years of work, 3,924 code commits, and more than a dozen point releases since the big Nmap 5 release in July 2009. Nmap 6 includes a more powerful Nmap Scripting Engine, 289 new scripts, better web scanning, full IPv6 support, the Nping packet prober, faster scans, and much more!"
Submission + - Nmap 6.0 Released (nmap.org)
Gerald writes: After 3 years of work Fyodor and company have released version 6.00 of the Nmap Security Scanner! The new release includes a more powerful Nmap Scripting Engine, 289 new scripts, better web scanning, full IPv6 support, the Nping packet prober, faster scans, and much more! We recommend that all current users upgrade. More info in the release notes.
Comment Re:Most won't notice (Score 1) 329
Really now? When have you ever known a publicly held company to prioritize development and long term results, over short term profits.
Well, Comcast is doing that very thing right now. The company is an enigma. They're moving the state of the IPv6 art forward in a tangible way. Their business class service is great. Every salesperson and tech I've dealt with has been sharp, helpful and friendly. At the same time they throttle traffic, then deny that they're doing it. They maintain low (even at 300GB) caps. Their CPE quality (from DVRs to routers) is astoundingly awful (even business class).
Comment Re:What's wrong with GCC? (Score 1) 711
I have indeed read the web page. In fact, I'm using scan-build + gcc as part of an automated build system. That doesn't change the fact that gcc itself doesn't ship with a static analyzer.
Comment Re:What's wrong with GCC? (Score 1) 711
It's missing a decent static analyzer?
Comment Re:Seems like Mac is a win ... (Score 1) 437
No static analysis. No redistributable CRT.
