Commit Graph

48 Commits

Author SHA1 Message Date
David A. Wheeler 547d1f3e17 Sending warnings to stderr, not stdout 2014-08-03 15:10:39 -04:00
David A. Wheeler 16ac21ca1f Fix some warning text (CWE reference was in wrong place) 2014-08-02 21:59:28 -04:00
David A. Wheeler 8f9ccc47ea Add option "-H" as a synonym for "--html" to generate HTML 2014-08-02 21:50:21 -04:00
David A. Wheeler 4c36be0094 Reorder help information, help and version are really common requests 2014-08-02 21:46:29 -04:00
David A. Wheeler 4f363e6766 flawfinder: Document Python language version issues 2014-07-30 23:45:39 -04:00
David A. Wheeler 304225c9bd Use non-integer division (requires Python 2.2+)
- Add "from __future__ import division".  This is the default in
     Python 3, and has been long available in Python 2.
2014-07-29 08:43:27 -04:00
David A. Wheeler 7e655111a9 flawfinder: Make comments fit in 80 char columns 2014-07-29 08:39:30 -04:00
David A. Wheeler 43ada0aae8 Reformat comments to be less than 80 columns long. 2014-07-29 08:37:06 -04:00
David A. Wheeler f74076c2fa Remove unnecessary invocation of "apply"
- Remove unnecessary invocation of "apply".
    Python 2.4 deprecated "apply", and Python 3 removes it.
2014-07-29 08:29:02 -04:00
David A. Wheeler bc5eef939f flawfinder: Replace tabs with spaces, making indentation char consistent 2014-07-29 08:23:24 -04:00
David A. Wheeler f351b779ac flawfinder: Change constructs of form "d.has_key(d)" to "k in d".
- Change code to be more idiomatic and closer to Python 3,
    while staying in Python 2.  For more information, see:
    http://www.dwheeler.com/essays/python3-in-python2.html
2014-07-29 08:18:52 -04:00
David A. Wheeler d769867375 Clearly document the license (GPLv2+) 2014-07-28 21:58:22 -04:00
David A. Wheeler a6b3a1b24d Add cross-link to "Secure Programming" book 2014-07-28 21:25:00 -04:00
David A. Wheeler 4e99642392 Switch version # to 1.31.
- Version number 1.30 might be confused with 1.3.  This eliminates
    the potential problem.
2014-07-27 17:19:24 -04:00
David A. Wheeler a33ae6c62e Add more wide character rules and refine CWE mapping 2014-07-22 23:17:53 -04:00
David A. Wheeler 5eb5e8411d Change version number to 1.30.
- This is the upcoming version number.  Change it now so that this
    is distinct from the released version 1.29.
2014-07-19 20:46:15 -04:00
David A. Wheeler 8423c14116 Fix up "make show-cwes" 2014-07-19 19:21:23 -04:00
David A. Wheeler 60948e8368 Move CWE-119 report on char into warning instead of recommendation 2014-07-19 19:16:41 -04:00
David A. Wheeler cfe1a062fe Tweak mappings to CWE. strlen() better maps to CWE-126 (buffer over-read) 2014-07-19 19:05:49 -04:00
David A. Wheeler 7112bf164c Rewrite print_multi_line. It's now shorter, faster, and formats better 2014-07-19 16:42:14 -04:00
David A. Wheeler f9a6fdd314 Add links to CWE entries when producing HTML, and tweak output report 2014-07-19 16:20:14 -04:00
David A. Wheeler 5c66efaf2b Update version# and years 2014-07-19 13:00:58 -04:00
David A. Wheeler 742cb6db13 flawfinder: Modify --listrules to also report default warning 2014-07-19 12:58:02 -04:00
David A. Wheeler ba451aceb7 Update dates 2014-07-13 13:21:40 -04:00
David A. Wheeler bd3bd7dae5 Add ability to search in warnings (e.g., for CWEs), and document that 2014-07-13 13:19:50 -04:00
David A. Wheeler 9de8db2e74 Add Common Weakness Enumeration (CWE) references 2014-07-13 00:06:04 -04:00
David A. Wheeler 5a56f2667d flawfinder: Simplify string check 2014-07-12 22:24:02 -04:00
David A. Wheeler 1d9a870d77 Add support for git diff (as well as svn diff and GNU diff) 2014-07-12 21:36:54 -04:00
David A. Wheeler 923cf6042c Rewrite documentation in man page and --help option for clarity
- Group options in --help, just like the man page, for clarity
  - Create a new group, "Selecting Input Data", so that they are
    clearly distinguished from selecting what hits to display.
  - Other clarifications in the man page.
2014-07-12 20:43:04 -04:00
David A. Wheeler 202bf127dc Handle unbalanced double-quotes in sprintf
- Handle unbalanced double-quotes.  This is a compilation error, but
    we can handle it more gracefully.
2014-07-12 12:25:59 -04:00
David A. Wheeler 40982f89ba Warn that time info is approximate
- We can't give exact times, in particular, the start time
    is measured only after Python finishes starting up.
    So, warn about that.
2014-07-12 12:11:26 -04:00
David A. Wheeler e95f94db75 Fix report on time executed (fix bug#7)
- The time reported was wrong in a misguided attempt to round.
2014-07-12 12:07:24 -04:00
David A. Wheeler 400b58817c Allow "flawfinder ." (fix bug#3)
- Skipping dotdir also skipped ".", but it shouldn't.
  - My thanks to Gerd, who provided the patch
2014-07-12 11:40:22 -04:00
David A. Wheeler f372da2530 Fix ignore directive when filenames differ (fix bug#6)
- My thanks to Bernhard Herzog who provided the patch!
2014-07-12 11:31:45 -04:00
David A. Wheeler 1623be3119 Document -F option in help output 2014-07-12 11:25:11 -04:00
David A. Wheeler f5e02e9ec2 Version number now 1.28, add test for filenames without trailing newline 2014-07-12 07:01:23 -04:00
David A. Wheeler 8674d33858 flawfinder: Fix patch so line number count is correct 2014-07-12 06:46:14 -04:00
David A. Wheeler 3bdc1db866 flawfinder: Handle files not ending in newline (from Alexis Wilke)
- Thanks to Alexis Wilke!
2014-07-12 06:21:34 -04:00
dwheeler 1331cd7aae Add atoi() and atol(). It's a little lame, but at least it's there.
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@14 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:20:49 +00:00
dwheeler ec80c6eacd Clean up getenv text
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@13 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:10:13 +00:00
dwheeler ed8a7b2a98 Permit .c++ as a C++ extension
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@12 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:07:27 +00:00
dwheeler 130ee2e521 Cleanup: Replaced initial tabs with spaces
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@11 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 14:35:52 +00:00
dwheeler bff102b656 Cleaned up code for patch handling, fix bug in subdir handling, include patch info in help.
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@10 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 14:32:07 +00:00
dwheeler 5808029a6a Better error message when the files cannot be read
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@7 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 03:44:31 +00:00
dwheeler 47c7711a79 Fix Debian bug #271287
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@6 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 03:35:20 +00:00
dwheeler 1ff26b75e5 Removed junk files, e.g., an old Debian report (long since fixed)
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@3 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 03:00:12 +00:00
dwheeler f5e94b32ec Support unified diff patch files, skip dot-dirs
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@2 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 02:53:03 +00:00
dwheeler 14c90f7335 Initial import
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@1 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 02:44:45 +00:00