From scan-admin at coverity.com  Mon Nov  6 08:12:16 2023
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Mon, 06 Nov 2023 08:12:16 +0000 (UTC)
Subject: Coverity Scan: Analysis completed for varnish
Message-ID: <65489fe04901c_2ad9f2d4ed1e699a03733@prd-scan-dashboard-0.mail>


    Your request for analysis of varnish has been completed successfully.
    The results are available at https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrJbcjUxJo9eCHXi2QbgV6m5FSuTtQOxGY1oSL52Ydbrw-3D-3DhDdJ_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je4-2BktHknTvgJT4MGy2pTzeOidD-2BOgSkDgnHS7kwh9XS9rzGvibl9RajxqdR3CIVag055TTmcsOpRGzgnoEoOWX8smNE38U8w-2Fvr8tYOohA7yeAlPiQNqm3go4quv6Y2Y-2BFysMKtGtTqFp-2FwLty90bZSu1oX-2FeiSvKud-2FQdg4aQIxeLeFk7E-2FhKQx6Bw7VrZliII-3D

    Build ID: 568358

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From scan-admin at coverity.com  Mon Nov 13 08:15:09 2023
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Mon, 13 Nov 2023 08:15:09 +0000 (UTC)
Subject: Coverity Scan: Analysis completed for varnish
Message-ID: <6551db0c93905_2e4172d5bb63019a4885f6@prd-scan-dashboard-0.mail>


    Your request for analysis of varnish has been completed successfully.
    The results are available at https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrJbcjUxJo9eCHXi2QbgV6m5FSuTtQOxGY1oSL52Ydbrw-3D-3D9AgN_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je49OfQdbFqU7DaP-2FD551oeZFnS79IRWSNlfckg-2BpwMyrhhyeP-2FWfXTawER52uE1-2FvtxqTXz0Hh82XVDj-2F2veZQ3p7j318g5v95hlnSlQ3SIeuoVA6jJbfItGDbXXzIqkvuu7TKoMU5MPlvOCJlYD6mRk2G-2FFK-2F9wVfwpwH2zzaoon4TT7iTnp8MO6masj-2FbSHSk-3D

    Build ID: 569902

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From scan-admin at coverity.com  Mon Nov 20 08:11:13 2023
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Mon, 20 Nov 2023 08:11:13 +0000 (UTC)
Subject: Coverity Scan: Analysis completed for varnish
Message-ID: <655b14a0aedc8_216d42dd9f2d3d9943349@prd-scan-dashboard-0.mail>


    Your request for analysis of varnish has been completed successfully.
    The results are available at https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrJbcjUxJo9eCHXi2QbgV6m5FSuTtQOxGY1oSL52Ydbrw-3D-3DoMch_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je4-2B1YrCNgUzvmy9ARK83qQKiZ8s3KpzAY1kug4Y-2B6DtdQ0CUSnTmZa4-2FrTabEi7ESQvN1IAjfusVH6vQzhgxWftrMiC7f-2BVPEqJjIA3g1KVCPV2NrWqo4RKQv8mpaWqHwK7CzBh38ftnSPCGyz6-2FNRit5oaD7HhneOxPbChyQimjpD1kOp-2BLvIu5gRIFlQG02EY-3D

    Build ID: 571479

    Analysis Summary:
       New defects found: 26
       Defects eliminated: 0

    If you have difficulty understanding any defects, email us at scan-admin at coverity.com,
    or post your question to StackOverflow
    at https://u15810271.ct.sendgrid.net/ls/click?upn=CTPegkVN6peWFCMEieYYmPWIi1E4yUS9EoqKFcNAiqhRq8qmgeBE-2Bdt3uvFRAFXdWuYPtetdiJ46h-2Fd1eC1gFA-3D-3DQjuI_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je4-2B1YrCNgUzvmy9ARK83qQKiZ8s3KpzAY1kug4Y-2B6DtdQ8-2BgrZ-2Fg3FD5Ja4AhS6ILktMK4ZmEO1arz3eX7eE7-2BYFm-2BLoeO0w7MKrXQIH23eeCFSRGY8G2aznd6sCsDnf-2FdHr49iiuco9rEHIN24Vb1OQVNrNdvl4SyRk89QR4BwkzJTFQEf8lVbx7fmvDnMLB34-3D

From dridi at varni.sh  Mon Nov 20 12:35:49 2023
From: dridi at varni.sh (Dridi Boukelmoune)
Date: Mon, 20 Nov 2023 12:35:49 +0000
Subject: Coverity Scan: Analysis completed for varnish
In-Reply-To: <655b14a0aedc8_216d42dd9f2d3d9943349@prd-scan-dashboard-0.mail>
References: <655b14a0aedc8_216d42dd9f2d3d9943349@prd-scan-dashboard-0.mail>
Message-ID: <CABoVN9DRp-eLSMiBrnyh7hawOF8mBb_=_hKQoku0U3nT_DF3eg@mail.gmail.com>

On Mon, Nov 20, 2023 at 8:11?AM <scan-admin at coverity.com> wrote:
>
>
>     Your request for analysis of varnish has been completed successfully.
>     The results are available at https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrJbcjUxJo9eCHXi2QbgV6m5FSuTtQOxGY1oSL52Ydbrw-3D-3DoMch_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je4-2B1YrCNgUzvmy9ARK83qQKiZ8s3KpzAY1kug4Y-2B6DtdQ0CUSnTmZa4-2FrTabEi7ESQvN1IAjfusVH6vQzhgxWftrMiC7f-2BVPEqJjIA3g1KVCPV2NrWqo4RKQv8mpaWqHwK7CzBh38ftnSPCGyz6-2FNRit5oaD7HhneOxPbChyQimjpD1kOp-2BLvIu5gRIFlQG02EY-3D
>
>     Build ID: 571479
>
>     Analysis Summary:
>        New defects found: 26
>        Defects eliminated: 0

I think Coverity Scan learned new tricks because nothing happened
since the last run:

---8<------8<------8<------8<------8<------8<------8<------8<------8<------8<------8<---
$ git log origin/master --since=2023-11-12 --reverse -p
commit 34c87dd2ce90b7b12e49551834d9c6fa00b4c59a (origin/master, origin/HEAD)
Author: Dag Haavi Finstad <daghf at varnish-software.com>
Date:   Mon Nov 6 14:13:50 2023 +0100

    changes.rst: minor language tweak

diff --git a/doc/changes.rst b/doc/changes.rst
index 11737f68ab..786803a7cb 100644
--- a/doc/changes.rst
+++ b/doc/changes.rst
@@ -53,10 +53,10 @@ Varnish Cache NEXT (2024-03-15)
   In particular, this feature is used to reduce resource consumption
   of HTTP/2 "rapid reset" attacks (see below).

-  Note, in particular, that *req_reset* events may lead to client
-  tasks for which no VCL is called ever. Presumably, this is thus the
-  first time that valid `vcl(7)` client transactions may not contain
-  any ``VCL_call`` records.
+  Note that *req_reset* events may lead to client tasks for which no
+  VCL is called ever. Presumably, this is thus the first time that
+  valid `vcl(7)` client transactions may not contain any ``VCL_call``
+  records.

 * Added mitigation options and visibility for HTTP/2 "rapid reset"
   attacks (CVE-2023-44487_, 3996_, 3997_, 3998_, 3999_).
--->8------>8------>8------>8------>8------>8------>8------>8------>8------>8------>8---

Still, worth investigating.

Dridi

From phk at phk.freebsd.dk  Mon Nov 20 12:42:12 2023
From: phk at phk.freebsd.dk (Poul-Henning Kamp)
Date: Mon, 20 Nov 2023 12:42:12 +0000
Subject: Coverity Scan: Analysis completed for varnish
In-Reply-To: <CABoVN9DRp-eLSMiBrnyh7hawOF8mBb_=_hKQoku0U3nT_DF3eg@mail.gmail.com>
References: <655b14a0aedc8_216d42dd9f2d3d9943349@prd-scan-dashboard-0.mail>
 <CABoVN9DRp-eLSMiBrnyh7hawOF8mBb_=_hKQoku0U3nT_DF3eg@mail.gmail.com>
Message-ID: <202311201242.3AKCgC6L059346@critter.freebsd.dk>

> I think Coverity Scan learned new tricks because nothing happened
> since the last run:

Indeed and I am going through them carefully as we speak.

They are suprisingly tricky to decide...

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

From scan-admin at coverity.com  Mon Nov 27 08:11:11 2023
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Mon, 27 Nov 2023 08:11:11 +0000 (UTC)
Subject: Coverity Scan: Analysis completed for varnish
Message-ID: <65644f1f20c0_8fe392dd9f2d3d994334c2@prd-scan-dashboard-0.mail>


    Your request for analysis of varnish has been completed successfully.
    The results are available at https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrJbcjUxJo9eCHXi2QbgV6m5FSuTtQOxGY1oSL52Ydbrw-3D-3DU1uq_WyTzqwss9kUEGhvWd0SG502mTu1yasCtuh9h-2FD3Je49s2w3j8CVTDSurzNsjELIpQu6axoTA-2BXRlOTcb9G6tqPNgUxCWYrXzbdwEvejCmVR8OoAzwT7SGv1EcL9rxufUBY221hFeEVqqklhX73GQIZlufJIJ-2F4lQAyR8GCbZGaMN-2BMBDUkOtEMd-2BcTfu9xvCM4Iy34sHZhVhfPdvyrWBI486uLf3WRP8qbXmnGoIqOg-3D

    Build ID: 573088

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0