diff --git a/flawfinder b/flawfinder index 28e378a..2ac92db 100755 --- a/flawfinder +++ b/flawfinder @@ -2243,10 +2243,18 @@ def show_final_results(): print("Minimum risk level = %d" % minimum_level) if output_format: print("
") + else: + print() if count > 0: print("Not every hit is necessarily a security vulnerability.") + print("You can inhibit a report by adding a comment in this form:") + print("// flawfinder: ignore") + print("Make *sure* it's a false positive!") + print("You can use the option --neverignore to show these.") if output_format: print("
") + else: + print() print("There may be other security vulnerabilities; review your code!") if output_format: print("
") diff --git a/test/correct-results-008.txt b/test/correct-results-008.txt index 70c7c5d..2932943 100644 --- a/test/correct-results-008.txt +++ b/test/correct-results-008.txt @@ -12,6 +12,7 @@ Hits@level+ = [0+] 0 [1+] 0 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 0 [1+] 0 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Suppressed hits = 2 (use --neverignore to show them) Minimum risk level = 1 + There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information. diff --git a/test/correct-results.html b/test/correct-results.html index dae2a84..3af0f8b 100644 --- a/test/correct-results.html +++ b/test/correct-results.html @@ -335,6 +335,10 @@ Suppressed hits = 2 (use --neverignore to show them) Minimum risk level = 1
Not every hit is necessarily a security vulnerability. +You can inhibit a report by adding a comment in this form: +// flawfinder: ignore +Make *sure* it's a false positive! +You can use the option --neverignore to show these.
There may be other security vulnerabilities; review your code!
diff --git a/test/correct-results.txt b/test/correct-results.txt index aab0128..9b89dc6 100644 --- a/test/correct-results.txt +++ b/test/correct-results.txt @@ -154,7 +154,13 @@ Hits@level+ = [0+] 54 [1+] 38 [2+] 29 [3+] 20 [4+] 17 [5+] 7 Hits/KSLOC@level+ = [0+] 642.857 [1+] 452.381 [2+] 345.238 [3+] 238.095 [4+] 202.381 [5+] 83.3333 Suppressed hits = 2 (use --neverignore to show them) Minimum risk level = 1 + Not every hit is necessarily a security vulnerability. +You can inhibit a report by adding a comment in this form: +// flawfinder: ignore +Make *sure* it's a false positive! +You can use the option --neverignore to show these. + There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.