Smatch-CI

For 15 years I have only used Smatch on the Linux kernel but it would be good to use it on User Space code as well. I do not want to waste your time. Every bug report has been reviewed by a human being before being sent.

Smatch-CI is a "between jobs" project for me. I have given myself a couple months to work on whatever I want to before I think about the next steps. It's not systematic, it's just for fun. Keeping score is fun. I am counting kernel bugs as part of Smatch-CI but I'm not counting the warnings from the zero-day bot.

Process

I chose to use Debian packages to avoid dealing with non-standard build systems. I first replaced /usr/bin/gcc with a wrapper that runs Smatch and then runs the real gcc. I then do:

    cd $pkg
    make -f debian/rules clean
    make -j16 -k -f debian/rules build
    find -name \*.c.smatch -exec cat \{\} \; -exec rm \{\} \; > ../smatch_warns

I then review the warnings, check whether the bug is still present in the latest code, and then send the email report.

April 8, 2026: Smatch-CI has only launched. No bugs reported.