5156456c79
flawfinder: Improve error-handling. Warn of non-existent files (esp long dash)
...
- Provide a separate warning for filenames listed on the command line
but do not actually exist.
- Provide a SPECIAL warning for filenames that begin with
the UTF-8 sequence of long dashes. Users might
copy-and-paste from the pdf version of the man page, and that might
produce long dashes (instead of normal dashes). This problem
can be hard to detect, so specially warning about it should help.
2014-08-03 15:29:05 -04:00
547d1f3e17
Sending warnings to stderr, not stdout
2014-08-03 15:10:39 -04:00
36b513af7c
flawfinder.1: Update manual page date
2014-08-03 14:53:10 -04:00
0017add313
README: Tweak so intro sentence similar to man page
2014-08-03 14:47:47 -04:00
d30fc2c1ac
README: Rewrite to explain more.
2014-08-03 14:01:30 -04:00
ba844e7eea
README: Fix spelling error
2014-08-03 13:18:51 -04:00
2c383e37a7
flawfinder.1: Note that .git and .svn are examples of directories skipped
2014-08-03 13:17:43 -04:00
1790331438
Update makefile: Don't use ",1" as temporary directory
2014-08-02 22:39:03 -04:00
1d9000a8c3
README: Update contents
2014-08-02 22:36:00 -04:00
9305afcb6e
INSTALL.txt: Make it clear that you can simply run without installing.
2014-08-02 22:26:37 -04:00
7727f10dce
flawfinder.1: Trivial reformat
2014-08-02 22:25:20 -04:00
75ce30e1c1
ChangeLog: Update for upcoming release
2014-08-02 22:15:51 -04:00
4159de084a
Document how to find all patterns that do NOT have a CWE mapping.
2014-08-02 22:05:23 -04:00
16ac21ca1f
Fix some warning text (CWE reference was in wrong place)
2014-08-02 21:59:28 -04:00
f05aa1270e
flawfinder.1: Grammar fix
2014-08-02 21:56:19 -04:00
8f9ccc47ea
Add option "-H" as a synonym for "--html" to generate HTML
2014-08-02 21:50:21 -04:00
4c36be0094
Reorder help information, help and version are really common requests
2014-08-02 21:46:29 -04:00
24b7da535b
flawfinder.1: Minor doc cleanups. Note that --listrules works with -D
2014-08-02 21:39:36 -04:00
3b2f032f25
flawfinder.1: Specially document -QDSC example (useful for tool writers)
2014-08-02 21:07:42 -04:00
4f363e6766
flawfinder: Document Python language version issues
2014-07-30 23:45:39 -04:00
fae254288c
Tweak README to explain, in a little more detail, what it is.
2014-07-30 23:25:10 -04:00
304225c9bd
Use non-integer division (requires Python 2.2+)
...
- Add "from __future__ import division". This is the default in
Python 3, and has been long available in Python 2.
2014-07-29 08:43:27 -04:00
7e655111a9
flawfinder: Make comments fit in 80 char columns
2014-07-29 08:39:30 -04:00
43ada0aae8
Reformat comments to be less than 80 columns long.
2014-07-29 08:37:06 -04:00
f74076c2fa
Remove unnecessary invocation of "apply"
...
- Remove unnecessary invocation of "apply".
Python 2.4 deprecated "apply", and Python 3 removes it.
2014-07-29 08:29:02 -04:00
bc5eef939f
flawfinder: Replace tabs with spaces, making indentation char consistent
2014-07-29 08:23:24 -04:00
f351b779ac
flawfinder: Change constructs of form "d.has_key(d)" to "k in d".
...
- Change code to be more idiomatic and closer to Python 3,
while staying in Python 2. For more information, see:
http://www.dwheeler.com/essays/python3-in-python2.html
2014-07-29 08:18:52 -04:00
bb6fa514c5
makefile: Tweak internal convenience target
2014-07-28 22:09:49 -04:00
492130a44b
ChangeLog: Document version differences
2014-07-28 22:06:55 -04:00
d769867375
Clearly document the license (GPLv2+)
2014-07-28 21:58:22 -04:00
cbb0a2426c
INSTALL.txt: Simplify text.
2014-07-28 21:41:02 -04:00
a6b3a1b24d
Add cross-link to "Secure Programming" book
2014-07-28 21:25:00 -04:00
4d5c3fe36c
Update installation instructions, now that prefix (etc.) are supported
2014-07-28 21:24:36 -04:00
7020a47a3e
flawfinder.1: Tweak output so 80-column version looks okay
2014-07-28 21:13:04 -04:00
ec361412f3
Support GNU convention variables (prefix, bindir, man1dir) and DESTDIR
...
- Modify makefile to support GNU convention makefile variable names,
including prefix, bindir, datarootdir, mandir, and man1dir.
It is tweaked so that the older variable names (e.g., INSTALL_DIR)
will continue to work.
- DESTDIR support added.
- Predefined a useful INSTALL_PROGRAM makefile variable; that means
that users can redefine it if they want.
2014-07-28 13:09:44 -04:00
71c34ea619
makefile: Clean up internal creating cwe program
2014-07-27 17:23:35 -04:00
4e99642392
Switch version # to 1.31.
...
- Version number 1.30 might be confused with 1.3. This eliminates
the potential problem.
2014-07-27 17:19:24 -04:00
1ebc5d5afb
Note that flawfinder is CWE-compatible.
2014-07-27 17:16:56 -04:00
a33ae6c62e
Add more wide character rules and refine CWE mapping
2014-07-22 23:17:53 -04:00
bbe7a28ada
flawfinder.1: Clean up man page, esp. option description
2014-07-21 00:00:12 -04:00
5eb5e8411d
Change version number to 1.30.
...
- This is the upcoming version number. Change it now so that this
is distinct from the released version 1.29.
2014-07-19 20:46:15 -04:00
564b78b98d
flawfinder.1: Document that hitlists should be trusted to be loaded or diffed
2014-07-19 20:42:37 -04:00
f980d02e2d
ChangeLog: Document major changes
2014-07-19 19:26:39 -04:00
8423c14116
Fix up "make show-cwes"
2014-07-19 19:21:23 -04:00
60948e8368
Move CWE-119 report on char into warning instead of recommendation
2014-07-19 19:16:41 -04:00
dcf40ef8fd
Modify test suite - also check generated HTML
2014-07-19 19:10:12 -04:00
cfe1a062fe
Tweak mappings to CWE. strlen() better maps to CWE-126 (buffer over-read)
2014-07-19 19:05:49 -04:00
e0c0b9bc8e
flawfinder.1: Minor documentation improvements, including removing blank lines
2014-07-19 18:38:24 -04:00
4156a4199c
flawfinder.1: Refine man page (esp. CWE discussion)
2014-07-19 17:23:10 -04:00
7112bf164c
Rewrite print_multi_line. It's now shorter, faster, and formats better
2014-07-19 16:42:14 -04:00
David A. Wheeler