564b78b98d
flawfinder.1: Document that hitlists should be trusted to be loaded or diffed
2014-07-19 20:42:37 -04:00
f980d02e2d
ChangeLog: Document major changes
2014-07-19 19:26:39 -04:00
8423c14116
Fix up "make show-cwes"
2014-07-19 19:21:23 -04:00
60948e8368
Move CWE-119 report on char into warning instead of recommendation
2014-07-19 19:16:41 -04:00
dcf40ef8fd
Modify test suite - also check generated HTML
2014-07-19 19:10:12 -04:00
cfe1a062fe
Tweak mappings to CWE. strlen() better maps to CWE-126 (buffer over-read)
2014-07-19 19:05:49 -04:00
e0c0b9bc8e
flawfinder.1: Minor documentation improvements, including removing blank lines
2014-07-19 18:38:24 -04:00
4156a4199c
flawfinder.1: Refine man page (esp. CWE discussion)
2014-07-19 17:23:10 -04:00
7112bf164c
Rewrite print_multi_line. It's now shorter, faster, and formats better
2014-07-19 16:42:14 -04:00
f9a6fdd314
Add links to CWE entries when producing HTML, and tweak output report
2014-07-19 16:20:14 -04:00
5c66efaf2b
Update version# and years
2014-07-19 13:00:58 -04:00
a7a7bb349b
Modify documentation for listrules, and add CWE mapping info
2014-07-19 12:58:15 -04:00
742cb6db13
flawfinder: Modify --listrules to also report default warning
2014-07-19 12:58:02 -04:00
df397eaf46
makefile: Modify "make clean" so it erases junk cve[.exe]
2014-07-13 15:11:32 -04:00
dcf7c7ff40
flawfinder.1: Expand CWE description and make other small improvements
2014-07-13 15:05:55 -04:00
622add482e
flawfinder.1: Minor tweaks
2014-07-13 13:49:51 -04:00
e97d0e6c18
flawfinder.1: Minor text cleanup about CWEs
2014-07-13 13:30:29 -04:00
ba451aceb7
Update dates
2014-07-13 13:21:40 -04:00
bd3bd7dae5
Add ability to search in warnings (e.g., for CWEs), and document that
2014-07-13 13:19:50 -04:00
620a6df894
Document CWEs covered by flawfinder
2014-07-13 09:53:15 -04:00
289f341f90
Add ability to list CWEs in source code
2014-07-13 09:44:34 -04:00
c1211121bf
ChangeLog: Record the new capabilities.
2014-07-13 00:20:56 -04:00
9de8db2e74
Add Common Weakness Enumeration (CWE) references
2014-07-13 00:06:04 -04:00
62af9ec2d5
flawfinder.1: Various minor man page improvements
2014-07-12 23:07:38 -04:00
af33f0e3e9
flawfinder.1: Clarify explanation of patchfile option
2014-07-12 22:35:12 -04:00
5a56f2667d
flawfinder: Simplify string check
2014-07-12 22:24:02 -04:00
1d9a870d77
Add support for git diff (as well as svn diff and GNU diff)
2014-07-12 21:36:54 -04:00
7ebfb3bbb6
Mention "git diff"
2014-07-12 21:06:45 -04:00
9dda4624dc
makefile: Allow "make dist" as synonym for "make distribute"
2014-07-12 20:58:32 -04:00
923cf6042c
Rewrite documentation in man page and --help option for clarity
...
- Group options in --help, just like the man page, for clarity
- Create a new group, "Selecting Input Data", so that they are
clearly distinguished from selecting what hits to display.
- Other clarifications in the man page.
2014-07-12 20:43:04 -04:00
23fe9f27c5
Document --listrules in man page
2014-07-12 19:24:32 -04:00
16caee60e0
flawfinder.1: Add missing period.
2014-07-12 19:22:14 -04:00
981d4203b1
makefile: Use MKDIR_P for portability
2014-07-12 12:28:58 -04:00
202bf127dc
Handle unbalanced double-quotes in sprintf
...
- Handle unbalanced double-quotes. This is a compilation error, but
we can handle it more gracefully.
2014-07-12 12:25:59 -04:00
40982f89ba
Warn that time info is approximate
...
- We can't give exact times, in particular, the start time
is measured only after Python finishes starting up.
So, warn about that.
2014-07-12 12:11:26 -04:00
e95f94db75
Fix report on time executed (fix bug#7)
...
- The time reported was wrong in a misguided attempt to round.
2014-07-12 12:07:24 -04:00
dca1931902
Change flawfinder.spec to comply with Fedora guidelines (fix bug#4)
...
- Thanks to Horst H. von Brand vonbrand,at,inf.utfsm.cl
2014-07-12 11:56:11 -04:00
400b58817c
Allow "flawfinder ." (fix bug#3)
...
- Skipping dotdir also skipped ".", but it shouldn't.
- My thanks to Gerd, who provided the patch
2014-07-12 11:40:22 -04:00
f372da2530
Fix ignore directive when filenames differ (fix bug#6)
...
- My thanks to Bernhard Herzog who provided the patch!
2014-07-12 11:31:45 -04:00
1623be3119
Document -F option in help output
2014-07-12 11:25:11 -04:00
f5e02e9ec2
Version number now 1.28, add test for filenames without trailing newline
2014-07-12 07:01:23 -04:00
8674d33858
flawfinder: Fix patch so line number count is correct
2014-07-12 06:46:14 -04:00
3bdc1db866
flawfinder: Handle files not ending in newline (from Alexis Wilke)
...
- Thanks to Alexis Wilke!
2014-07-12 06:21:34 -04:00
02052dc7d4
Update test results (released 1.27 includes this)
2013-08-25 09:41:06 -04:00
0ee2ef113c
Modify ChangeLog - ready for version 1.27
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@18 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:23:50 +00:00
6e33789344
Add more documentation about --patch
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@17 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:15:06 +00:00
85ed86f2c0
Note in ChangeLog that we've fixed the divide-by-zero when no code found
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@16 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:28:20 +00:00
193d33d157
Fix README; the file is INSTALL.txt not INSTALL
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@15 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:26:02 +00:00
1331cd7aae
Add atoi() and atol(). It's a little lame, but at least it's there.
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@14 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:20:49 +00:00
ec80c6eacd
Clean up getenv text
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@13 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:10:13 +00:00
David A. Wheeler
dwheeler