Télécharger la liste

Description du projet

Flawfinder searches through source code looking for potential security flaws. It will provide a list of potential security flaws, sorted by risk, with the most potentially dangerous flaws shown first. This risk level depends not only on the function, but on the values of the parameters of the function. Flawfinder ignores text inside comments and strings.

Système requise

System requirement is not defined
Information regarding Project Releases and Project Resources. Note that the information here is a quote from Freecode.com page, and the downloads themselves may not be hosted on OSDN.

2004-05-31 22:52 Retour à la liste release
1.25

Cette version ajoute plus de règles pour trouver des failles de sécurité impliquant cuserid, getlogin, getpass, mkstemp, getpw, memalign, gsignal, ssignal, ulimit, et usleep. Il dispose de 137 règles qui il vérifie automatiquement. Long texte a été ajoutée au manuel d'expliquer exactement comment utiliser flawfinder avec Vim et Emacs. Une erreur dans le format des colonnes - a été fixé, et le raccourci de nombreuses mono-commandes lettre ont été ajoutés. Il essaie d'auto-éliminer certains faux positifs, et un «- falsepositive" (-F) option a été ajoutée qui tend à occulter d'autres encore.
Tags: Minor feature enhancements
This release adds more rules for finding security flaws involving cuserid, getlogin, getpass, mkstemp, getpw, memalign, gsignal, ssignal, ulimit, and usleep. It has 137 rules that it checks automatically. Lengthy text has been added to the manual to explain exactly how to use flawfinder with Vim and Emacs. An error in the --columns format has been fixed, and many shortcut single-letter commands have been added. It tries to auto-remove some false positives, and a "--falsepositive" (-F) option has been added that tries to remove many more.

Project Resources