diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 7b4a8bc..5218a88 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -9,7 +9,7 @@ For normal problems, bugs, and feature requests, please file a [ticket](https://sourceforge.net/p/flawfinder/_list/tickets). If you find a vulnerability, please separately send a private email to -[David A. Wheeler](https://www.dwheeler.com/contactme.html). +[David A. Wheeler](https://dwheeler.com/contactme.html). We plan to handle vulnerabilities separately, fixing them and *then* telling the world. We will gladly provide credit to vulnerability reporters (unless you don't want the credit). We've never had a vulnerability diff --git a/README.md b/README.md index b233db6..e0c4983 100644 --- a/README.md +++ b/README.md @@ -9,12 +9,12 @@ static source code analysis tools more generally. It is designed to be easy to install and use. Flawfinder supports the Common Weakness Enumeration (CWE) and is officially CWE-Compatible. -For more information, see the [project website](http://www.dwheeler.com/flawfinder) +For more information, see the [project website](http://dwheeler.com/flawfinder) # Platforms Flawfinder is designed for use on Unix/Linux/POSIX systems -(including Cygwin, Linux-based systems, MacOS, and *BSDs) as a +(including Cygwin, Linux-based systems, MacOS, and various BSDs) as a command line tool. It requires Python 2.7 or Python 3. # Installation diff --git a/correct-results.html b/correct-results.html index d4c931d..34bd6fc 100644 --- a/correct-results.html +++ b/correct-results.html @@ -9,8 +9,8 @@

Flawfinder Results

Here are the security scan results from -Flawfinder version 2.0.6, -(C) 2001-2017 David A. Wheeler. +Flawfinder version 2.0.6, +(C) 2001-2017 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223

Examining test.c
@@ -324,7 +324,7 @@ Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
-See 'Secure Programming HOWTO' -(https://www.dwheeler.com/secure-programs) for more information. +See 'Secure Programming HOWTO' +(https://dwheeler.com/secure-programs) for more information. diff --git a/correct-results.txt b/correct-results.txt index 82a823c..90dfaf5 100644 --- a/correct-results.txt +++ b/correct-results.txt @@ -151,7 +151,7 @@ Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' -(https://www.dwheeler.com/secure-programs) for more information. +(https://dwheeler.com/secure-programs) for more information. Testing for no ending newline: Lines analyzed = 32 diff --git a/flawfinder b/flawfinder index 7f1a80a..f7a921c 100755 --- a/flawfinder +++ b/flawfinder @@ -1670,8 +1670,8 @@ def display_header(): print("") print("

Flawfinder Results

") print("Here are the security scan results from") - print('Flawfinder version %s,' % version) - print('(C) 2001-2017 David A. Wheeler.') + print('Flawfinder version %s,' % version) + print('(C) 2001-2017 David A. Wheeler.') else: print("Flawfinder version %s, (C) 2001-2017 David A. Wheeler." % version) displayed_header = 1 @@ -2159,11 +2159,11 @@ def show_final_results(): print("There may be other security vulnerabilities; review your code!") if output_format: print("
") - print("See 'Secure Programming HOWTO'") - print("(https://www.dwheeler.com/secure-programs) for more information.") + print("See 'Secure Programming HOWTO'") + print("(https://dwheeler.com/secure-programs) for more information.") else: print("See 'Secure Programming HOWTO'") - print("(https://www.dwheeler.com/secure-programs) for more information.") + print("(https://dwheeler.com/secure-programs) for more information.") if output_format: print("") print("") diff --git a/flawfinder.1 b/flawfinder.1 index 024c9d6..71412c4 100644 --- a/flawfinder.1 +++ b/flawfinder.1 @@ -266,11 +266,11 @@ If you're getting an extraordinary number of false positives because variable names look like dangerous function names, use the \-F option to remove reports about them. If you don't understand the error message, please see documents such as the -.UR "https://www.dwheeler.com/secure-programs" +.UR "https://dwheeler.com/secure-programs" .I "Secure Programming HOWTO" .UE at -https://www.dwheeler.com/secure-programs +https://dwheeler.com/secure-programs which provides more information on writing secure programs. .PP Once you identify the problem and understand it, you can fix it. @@ -1043,7 +1043,7 @@ can be fixed. However, developers and reviewers must know how to develop secure software to use this tool, because otherwise, \fIa fool with a tool is still a fool\fR. -My book at https://www.dwheeler.com/secure-programs may help. +My book at https://dwheeler.com/secure-programs may help. .PP This tool should be, at most, a small part of a larger software development process designed @@ -1258,11 +1258,11 @@ Still, it can serve as a useful aid for humans, helping to identify useful places to examine further, and that's the point of this simple tool. .SH "SEE ALSO" -See the flawfinder website at https://www.dwheeler.com/flawfinder. +See the flawfinder website at https://dwheeler.com/flawfinder. You should also see the .I "Secure Programming HOWTO" at -.IR "https://www.dwheeler.com/secure-programs" . +.IR "https://dwheeler.com/secure-programs" . .SH AUTHOR David A. Wheeler (dwheeler@dwheeler.com). diff --git a/flawfinder.spec b/flawfinder.spec index 5e3aa71..a05bff8 100644 --- a/flawfinder.spec +++ b/flawfinder.spec @@ -4,8 +4,8 @@ Version: 2.0.6 Release: 1%{?dist} License: GPLv2+ Group: Development/Tools -URL: http://www.dwheeler.com/flawfinder/ -Source: http://www.dwheeler.com/flawfinder/%{name}-%{version}.tar.gz +URL: http://dwheeler.com/flawfinder/ +Source: http://dwheeler.com/flawfinder/%{name}-%{version}.tar.gz Requires: python BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) diff --git a/setup.py b/setup.py index dca35a1..0ebc7fb 100644 --- a/setup.py +++ b/setup.py @@ -21,7 +21,7 @@ setup (# Distribution meta-data C/C++ source code and identify out potential security flaws, ranking them by likely severity. It is released under the GNU GPL license.""", - url = "http://www.dwheeler.com/flawfinder/", + url = "http://dwheeler.com/flawfinder/", download_url = "https://sourceforge.net/projects/flawfinder/files/flawfinder-2.0.6.tar.gz/download", zip_safe = True, keywords = ['analysis', 'security', 'analyzer'],