The Haiku git repository is now running Gerrit. Gerrit is a tool designed
to help with code reviews. The idea is to review the code before it is integrated
in nightly builds, instead of reviewing after the fact as it was done for Haiku
until now.
Thanking you for another excellent monthly activity report.
The initiative to include a formal code review before it is integrated into the nightly builds is a good one. This should reduce the probability of a lethal issue arising in a nightly build. Hopefully the tool, Gerrit, integrates well with the developers’ workflow and will not prove too onerous on their time.
The kernel appears to have been heavily revisited with respect to integrity and security for data transfers between the user and kernel spaces. It is presumed that this is in response to the triple-threat design flaw related to speculative branch execution. Is this correct?
This looks to have been a very productive month for the developers. It is unclear, however, if any of these revisions reduced the number of blocking issues on the path to the beta release.
As far as I understand, the meltdown attack is still possible on Haiku (because the kernel is still mapped in memory when userland code is running - supposedly unreachable but that’s what meltdown bypasses). It was however an opportunity to review other potential problems, and we found some that were not too hard to fix. They are more direct and obvious attacks where you just make a syscall with a forged pointer value (not pointing to an userland buffer, but to somewhere in the kernel, for example).
Gerrit was not listed there but my personal opinion is that it is a required tool for sane management of the release process (in fact I started pushing for Gerrit right after the alpha3 release). However it led to https://dev.haiku-os.org/ticket/13937 so we are 1 more bug away from the release now.
Just a clarification: showing BMessage content has been possible for years already given a debug libbe.so. What wasn’t possible until now was asking the debugger to switch between that and the raw view, which one would likely need if e.g. you were working on changes to BMessage itself.
It’s good that the kernel was revisited and integrity/security weaknesses were addressed. Unfortunate about the Meltdown Attack as it is impacting all commercial, community, and hobby operating systems alike.
It appears that progress is in a one-step-forward/two-steps-backward mode which is very common when a project is approaching a milestone. It will get there although the last blocking issues may take more efforts to fix than currently anticipated.
Much appreciated report, as usual. However, it seems your FOSDEM report never made it to the front page. I had to do a search for it. It was also a good read.