From af33f0e3e9b121d69b81441da362dae292341072 Mon Sep 17 00:00:00 2001 From: "David A. Wheeler" Date: Sat, 12 Jul 2014 22:35:12 -0400 Subject: [PATCH] flawfinder.1: Clarify explanation of patchfile option --- flawfinder.1 | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/flawfinder.1 b/flawfinder.1 index e64b86e..c8345ee 100644 --- a/flawfinder.1 +++ b/flawfinder.1 @@ -344,14 +344,13 @@ behavior is now the default. .BI \-\-patch patchfile .TP .BI \-P patchfile -Only report hits that are changed by the given patch file. -The patch file must be in unified diff format (e.g., the output of -"diff -u old new", "svn diff", or "git diff"), -where the new files are the ones that are -being examined by flawfinder. -The files referenced in the patch files are examined, but only the -lines changed in the patch are reported on. +Examine the selected files or directories, but only report hits in lines +that are added or modified by the given patch file. +The patch file must be in a recognized unified diff format +(e.g., the output of "diff -u old new", "svn diff", or "git diff [commit]"). Flawfinder assumes that the patch has already been applied to the files. +The patch file can also include changes to irrelevant files +(they will simply be ignored). The line numbers given in the patch file are used to determine which lines were changed, so if you have modified the files since the patch file was created, regenerate the patch file first.