Changes between Version 11 and Version 12 of SponsoringPrograms/STF/2025


Ignore:
Timestamp:
Jul 29, 2025, 8:46:46 PM (12 months ago)
Author:
Pierre-Anthony Lemieux
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • SponsoringPrograms/STF/2025

    v11 v12  
    1414=== One line summary of the proposed work
    1515
    16 Example: Classify and fix outstanding issues identified by Coverity
     16Example:
     17
     18> Classify and fix outstanding issues identified by Coverity
    1719
    1820=== Description of the work
    1921
    20 Example: Coverity is a static code analysis system that is used to analyze FFmpeg code to find bugs with an emphasis on quality and security issues. There are currently 677 outstanding issues identified by Coverity (https://scan.coverity.com/projects/ffmpeg?tab=overview). Some of these issues are false positives while others could open the door to security vulnerabilities. The objective of this work is to identify the Coverity issues that are not false positives, and fix as many as possible.
     22Example:
     23
     24> Coverity is a static code analysis system that is used to analyze FFmpeg code to find bugs with an emphasis on quality and security issues. There are currently 677 outstanding issues identified by Coverity (https://scan.coverity.com/projects/ffmpeg?tab=overview). Some of these issues are false positives while others could open the door to security vulnerabilities. The objective of this work is to identify the Coverity issues that are not false positives, and fix as many as possible.
    2125
    2226=== Milestones
     
    2630===== Description
    2731
    28 Example: Review all outstanding Coverity issues and, for each one, determine whether it is a false positive.
     32Example:
     33> Review all outstanding Coverity issues and, for each one, determine whether it is a false positive.
    2934
    3035===== Deliverables
    3136
    32 Example: List of both false positive and real issues posted to the FFmpeg dev mailing list.
     37Example:
     38> List of both false positive and real issues posted to the FFmpeg dev mailing list.
    3339
    3440===== Requested compensation (in USD or Euros)
     
    3642==== Milestone 2
    3743
    38 Etc.
     44Etc.
    3945
    4046==== Developer background and contact information
    4147
    42 Example: Michael Niedermayer <michael-ffwork@niedermayer.cc>. I work in Austria, and have been an active contributor to FFmpeg since 2001 – 22308 commits so far. My work on FFmpeg is regularly supported by third parties and I am one of the founders of https://fflabs.eu. I am also extremely familiar with Coverity: I have fixed 690 issues out of 847 Coverity issues fixed in the past. I fixed over 2000 issues found by ossfuzz.
     48Example:
     49
     50> Michael Niedermayer <michael-ffwork@niedermayer.cc>. I work in Austria, and have been an active contributor to FFmpeg since 2001 – 22308 commits so far. My work on FFmpeg is regularly supported by third parties and I am one of the founders of https://fflabs.eu. I am also extremely familiar with Coverity: I have fixed 690 issues out of 847 Coverity issues fixed in the past. I fixed over 2000 issues found by ossfuzz.
    4351
    4452== FFMPEG 2025 STF Application