diff --git a/correct-results.html b/correct-results.html index 77ef43a..cc81ad4 100644 --- a/correct-results.html +++ b/correct-results.html @@ -196,7 +196,7 @@ Examining test2.c
href="http://cwe.mitre.org/data/definitions/119.html">CWE-119,CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size - is larger than the maximum possible length (CWE-119). + is larger than the maximum possible length.
   char d[20];
 
@@ -205,7 +205,7 @@ Examining test2.c
href="http://cwe.mitre.org/data/definitions/119.html">CWE-119,CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size - is larger than the maximum possible length (CWE-119). + is larger than the maximum possible length.
   char s[20];
 
diff --git a/correct-results.txt b/correct-results.txt index 2edd737..a3600ff 100644 --- a/correct-results.txt +++ b/correct-results.txt @@ -88,13 +88,11 @@ test.c:19: [2] (buffer) sprintf: test.c:45: [2] (buffer) char: Statically-sized arrays can be overflowed or have other issues (CWE-119,CWE-120). Perform bounds checking, use functions that limit - length, or ensure that the size is larger than the maximum possible length - (CWE-119). + length, or ensure that the size is larger than the maximum possible length. test.c:46: [2] (buffer) char: Statically-sized arrays can be overflowed or have other issues (CWE-119,CWE-120). Perform bounds checking, use functions that limit - length, or ensure that the size is larger than the maximum possible length - (CWE-119). + length, or ensure that the size is larger than the maximum possible length. test.c:50: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. diff --git a/flawfinder b/flawfinder index ae856f8..9447e1d 100755 --- a/flawfinder +++ b/flawfinder @@ -765,10 +765,9 @@ c_ruleset = { "char|TCHAR|wchar_t": # This isn't really a function call, but it works. (c_static_array, 2, "Statically-sized arrays can be overflowed or have other issues " + - "(CWE-119,CWE-120)", - ("Perform bounds checking, use functions that limit length, " + - "or ensure that the size is larger than the maximum possible length " + - "(CWE-119)"), + "(CWE-119,CWE-120)", + "Perform bounds checking, use functions that limit length, " + + "or ensure that the size is larger than the maximum possible length", "buffer", "", {'extract_lookahead' : 1}), "gets|_getts":