2002-01-05 09:32:58 +00:00
|
|
|
Flawfinder searches through source code looking for potential security
|
|
|
|
|
flaws. Flawfinder uses an internal database called the ``ruleset''; the
|
2001-07-23 14:04:52 +00:00
|
|
|
ruleset identifies functions that are common causes of security flaws.
|
2002-01-05 09:32:58 +00:00
|
|
|
Every potential security flaw found in a given source code file (matching
|
2001-07-23 14:04:52 +00:00
|
|
|
an entry in the ruleset) is called a ``hit,'' and the set of hits found
|
|
|
|
|
during any particular run is called the ``hitlist.''
|
|
|
|
|
|
|
|
|
|
WWW: http://www.dwheeler.com/flawfinder/
|
