From 1623be3119308c8eb89a6a6dbfd03afded633ca0 Mon Sep 17 00:00:00 2001 From: "David A. Wheeler" Date: Sat, 12 Jul 2014 11:23:39 -0400 Subject: [PATCH] Document -F option in help output --- flawfinder | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/flawfinder b/flawfinder index 9f317ba..e5ec533 100755 --- a/flawfinder +++ b/flawfinder @@ -1554,6 +1554,15 @@ flawfinder [--help] [--context] [-c] [--columns | -C] [--html] --html Display as HTML output. + -F Do not include hits that are likely to be false positives. + Currently, this means that function names are ignored if + they're not followed by "(", and that declarations of char- + acter arrays aren't noted. Thus, if you have use a vari- + able named "access" everywhere, this will eliminate refer- + ences to this ordinary variable. This isn't the default, + because this also increases the likelihood of missing + important hits; in particular, function names in #define + clauses and calls through function pointers will be missed. -m X --minlevel=X Set minimum risk level to X for inclusion in hitlist. This