We're doing coverity scans for all components of IoT OS, including yocto, and have uncovered a bunch of potential issues that affect yocto project. Here's a link with all the "high" impact ones (there's around 70) https://cov.jf.intel.com/reports.htm#v15129/p10089 (Intel engineers should be able to log in using idsid and corp password. Ping me at terri.oda@intel.com if you need help with the system.) The Ostro team is antsy that these could delay their release and would really love it if someone from the yocto team could at least triage them. I suspect a decent number of them may be false positives.
Removing this from bugzilla