Project Name | Firefox |
---|---|
Lines of code analyzed | 8,732,253 |
On Coverity Scan since | Feb 22, 2006 |
Last build analyzed | 2 days ago |
Language | C/C++ |
Repository URL | https://hg.mozilla.org/mozilla-central |
Homepage URL | https://www.mozilla.org |
License | MPL (Mozilla Public License ) |
Want to view defects or help fix defects?
Add me to projectVersion: Version
Line of Code (LOC) | Defect Density |
---|---|
Less than 100,000 | 0.35 |
100,000 to 499,999 | 0.5 |
500,000 to 1 million | 0.7 |
More than 1 million | 0.65 |
Note: Defect density is measured by the number of defects per 1,000 lines of code, identified by the Coverity platform. The numbers shown above are from our 2013 Coverity Scan Report, which analyzed 250 million lines of open source code.
Note: Defect density is measured by the number of defects per 1,000 lines of code.
Component Name | Pattern | Ignore | Line of Code | Defect density |
---|---|---|---|---|
layout | /layout/.* | No | 220,507 | 0.41 |
xpcom | /xpcom/.* | No | 69,714 | 0.88 |
dom-indexedDB | /dom/indexedDB/.* | No | 31,301 | 0.32 |
dom-workers | /dom/workers/.* | No | 20,429 | 1.13 |
PSM | /security/manager/.* | No | 25,182 | 1.91 |
image | /image/.* | No | 33,615 | 1.10 |
nsprpub | /nsprpub/.* | No | 24,564 | 0.37 |
parser | /parser/.* | No | 50,514 | 0.40 |
security | /security/.* | No | 306,325 | 0.52 |
storage | /storage/.* | No | 5,065 | 0.79 |
docshell | /docshell/.* | No | 22,134 | 1.94 |
editor | /editor/.* | No | 74,639 | 0.47 |
accessible | /accessible/.* | No | 44,064 | 0.52 |
extensions | /extensions/.* | No | 23,611 | 1.74 |
memory | /memory/.* | No | 9,339 | 1.18 |
brotli | /modules/brotli/.* | No | 11,559 | 0.26 |
libmar | /modules/libmar/.* | No | 2,941 | 4.08 |
modules | /modules/.* | No | 33,157 | 0.78 |
toolkit | /toolkit/.* | No | 261,127 | 1.32 |
widget | /widget/.* | No | 76,071 | 0.92 |
xpfe | /xpfe/.* | No | 4,784 | 1.67 |
generated-test-files | .*/dom/bindings/Test*.cpp | No | 206,506 | 0.66 |
dom-canvas | /dom/canvas/.* | No | 40,981 | 0.98 |
IPC-dom-plugin | /dom/plugins/ipc/.* | No | 0 | N/A |
dom-plugins | /dom/plugins/.* | No | 0 | N/A |
dom-html | /dom/html/.* | No | 41,596 | 1.32 |
dom-xslt | /dom/xslt/.* | No | 18,383 | 0.38 |
dom-media | /dom/media/.* | No | 294,506 | 1.45 |
dom-promise | /dom/promise/.* | No | 1,175 | 2.55 |
dom-svg | /dom/svg/.* | No | 25,017 | 1.36 |
dom-crypto | /dom/crypto/.* | No | 4,392 | 0.00 |
dom-xbl | /dom/xbl/.* | No | 0 | N/A |
IPC-dom | /dom/ipc/.* | No | 29,562 | 1.18 |
content | /(content|dom)/.* | No | 380,315 | 1.54 |
JavaScript-jit | /js/src/jit/.* | No | 187,719 | 1.10 |
JavaScript-asmjs | /js/src/asmjs/.* | No | 0 | N/A |
JavaScript-xpconnect | /js/xpconnect/.* | No | 29,907 | 1.00 |
JavaScript-ctypes | /js/src/ctypes/.* | No | 12,999 | 0.77 |
JavaScript-frontend | /js/src/frontend/.* | No | 45,527 | 0.46 |
JavaScript-jsapi-tests | /js/src/jsapi-tests/.* | Yes | 0 | N/A |
JavaScript-proxy | /js/src/proxy/.* | No | 3,628 | 0.28 |
JavaScript-shell | /js/src/shell/.* | No | 0 | N/A |
JavaScript-vm | /js/src/vm/.* | No | 101,396 | 0.36 |
IPC-js | /js/ipc/.* | No | 0 | N/A |
JavaScript | /js/.* | No | 271,881 | 0.43 |
gfx-cairo | /gfx/cairo/.* | Yes | 121,561 | N/A |
skia | /gfx/skia/skia/.* | Yes | 181,770 | N/A |
gfx-gl | /gfx/gl/.* | No | 24,161 | 0.41 |
gfx-graphite2 | /gfx/graphite2/.* | No | 12,225 | 1.06 |
IPC-gfx-layers | /gfx/layers/ipc/.* | No | 10,631 | 1.22 |
gfx-layers | /gfx/layers/.* | No | 49,245 | 1.36 |
gfx-thebes | /gfx/thebes/.* | No | 52,532 | 0.93 |
gfx | /gfx/.* | No | 264,055 | 1.07 |
network-cache | /netwerk/cache/.* | No | 0 | N/A |
network-cache2 | /netwerk/cache2/.* | No | 18,650 | 0.54 |
network-dns | /netwerk/dns/.* | No | 12,620 | 2.30 |
network-websocket | /netwerk/protocol/websocket/.* | No | 6,557 | 2.29 |
network-http | /netwerk/protocol/http/.* | No | 70,784 | 1.96 |
IPC-netwerk | /netwerk/ipc/.* | No | 5,435 | 3.68 |
netwerk-srtp | /netwerk/srtp/.* | No | 0 | N/A |
network-sctp | /netwerk/sctp/.* | No | 76,099 | 1.92 |
network | /netwerk/.* | No | 75,389 | 2.04 |
media-libjpeg | /media/libjpeg/.* | No | 27,229 | 0.48 |
media-libstagefright | /media/libstagefright/.* | No | 0 | N/A |
media-libvorbis | /media/libvorbis/.* | No | 49,852 | 0.14 |
media-mtransport | /media/mtransport/.* | No | 0 | N/A |
media-libvpx | /media/libvpx/.* | Yes | 117,578 | N/A |
intl-icu | /intl/icu/.* | Yes | 223,150 | N/A |
aom-thirdparty | /third_party/aom/.* | Yes | 266,772 | N/A |
media-libopus | /media/libopus/.* | Yes | 37,019 | N/A |
media-webrtc | /media/webrtc/.* | Yes | 0 | N/A |
sqlite-thirdparty | /db/sqlite3/.* | Yes | 0 | N/A |
media-mtransport-thirdparty | /media/mtransport/third_party/.* | Yes | 0 | N/A |
media | /media/.* | No | 209,053 | 0.35 |
intl | /intl/.* | No | 19,009 | 0.32 |
IPC-chromium | /ipc/chromium/.* | No | 39,572 | 0.48 |
IPC-glue | /ipc/glue/.* | No | 11,095 | 1.71 |
IPC | .*/ipc/.* | No | 516,747 | 0.01 |
tools-profiler | /tools/profiler/.* | No | 23,896 | 1.09 |
uriloader | /uriloader/.* | No | 10,400 | 2.40 |
view | /view/.* | No | 1,794 | 1.11 |
caps | /caps/.* | No | 5,556 | 1.26 |
hal | /hal/.* | No | 1,383 | 1.45 |
embedding | /embedding/.* | No | 0 | N/A |
testing | /testing/.* | No | 1,405 | 2.85 |
headers | /obj-x86_64-pc-linux-gnu/dist/include/.* | No | 879,363 | 0.61 |
build-time | /obj-x86_64-pc-linux-gnu/.* | No | 1,287,659 | 0.08 |
hunspell | /extensions/spellcheck/hunspell/.* | No | 0 | N/A |
google-breakpad | /toolkit/crashreporter/google-breakpad/.* | No | 0 | N/A |
protocol-buffer | /toolkit/components/protobuf/src/google/protobuf/.* | No | 0 | N/A |
devtools | /devtools/.* | No | 6,173 | 0.16 |
webapprt | /webapprt/.* | No | 0 | N/A |
build-unix | /build/unix/.* | No | 522 | 11.49 |
browser | /browser/.* | No | 1,954 | 5.63 |
config | /config/.* | No | 529 | 9.45 |
tools | /tools/.* | No | 882 | 2.27 |
mfbt | /mfbt/tests/.* | Yes | 13,068 | N/A |
NSS | /security/nss/.* | Yes | 0 | N/A |
system-header | /usr/include/.* | Yes | 0 | N/A |
snappy | /other-licenses/snappy/.* | No | 0 | N/A |
rdf | /rdf/.* | No | 0 | N/A |
configure-gen | .*conftest\..*.cpp | Yes | 0 | N/A |
jpeg-xl | /third_party/jpeg-xl/.* | No | 31,156 | 2.44 |
libwebrtc | /third_parth/libwebrtc/.* | No | 0 | N/A |
dav1d | /third_parth/dav1d/.* | No | 0 | N/A |
lz4 | /mfbt/lz4/.* | No | 0 | N/A |
mozglue | /mozglue/.* | No | 42,972 | 0.56 |
glslopt | /third_party/rust/glslopt/.* | No | 110,833 | 0.43 |
sqlite3 | /third_party/sqlite3/.* | No | 184,013 | 0.34 |
wayland-proxy | /third_party/wayland-proxy/.* | No | 884 | 5.66 |
zstd | /third_party/zstd/.* | No | 12,354 | 0.49 |
lmdb-rkv-sys | /third_party/rust/lmdb-rkv-sys/.* | No | 8,217 | 0.97 |
chrome | /chrome/.* | No | 1,317 | 7.59 |
startupcache | /startupcache/.* | No | 934 | 5.35 |
Other | .* | No | 608,555 | 0.60 |
ID | CWE-Name | Number of Defects |
---|---|---|
120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 12 |
190 | Integer Overflow or Wraparound | 41 |
676 | Use of Potentially Dangerous Function | 19 |
Coverity Scan tests every line of code and potential execution path. The root cause of each defect is clearly explained, making it easy to fix bugs.
Would you like to view the project defects, or help improve its quality by fixing defects?
Add me to project