David A. Wheeler
60948e8368
Move CWE-119 report on char into warning instead of recommendation
2014-07-19 19:16:41 -04:00
David A. Wheeler
dcf40ef8fd
Modify test suite - also check generated HTML
2014-07-19 19:10:12 -04:00
David A. Wheeler
cfe1a062fe
Tweak mappings to CWE. strlen() better maps to CWE-126 (buffer over-read)
2014-07-19 19:05:49 -04:00
David A. Wheeler
e0c0b9bc8e
flawfinder.1: Minor documentation improvements, including removing blank lines
2014-07-19 18:38:24 -04:00
David A. Wheeler
4156a4199c
flawfinder.1: Refine man page (esp. CWE discussion)
2014-07-19 17:23:10 -04:00
David A. Wheeler
7112bf164c
Rewrite print_multi_line. It's now shorter, faster, and formats better
2014-07-19 16:42:14 -04:00
David A. Wheeler
f9a6fdd314
Add links to CWE entries when producing HTML, and tweak output report
2014-07-19 16:20:14 -04:00
David A. Wheeler
5c66efaf2b
Update version# and years
2014-07-19 13:00:58 -04:00
David A. Wheeler
a7a7bb349b
Modify documentation for listrules, and add CWE mapping info
2014-07-19 12:58:15 -04:00
David A. Wheeler
742cb6db13
flawfinder: Modify --listrules to also report default warning
2014-07-19 12:58:02 -04:00
David A. Wheeler
df397eaf46
makefile: Modify "make clean" so it erases junk cve[.exe]
2014-07-13 15:11:32 -04:00
David A. Wheeler
dcf7c7ff40
flawfinder.1: Expand CWE description and make other small improvements
2014-07-13 15:05:55 -04:00
David A. Wheeler
622add482e
flawfinder.1: Minor tweaks
2014-07-13 13:49:51 -04:00
David A. Wheeler
e97d0e6c18
flawfinder.1: Minor text cleanup about CWEs
2014-07-13 13:30:29 -04:00
David A. Wheeler
ba451aceb7
Update dates
2014-07-13 13:21:40 -04:00
David A. Wheeler
bd3bd7dae5
Add ability to search in warnings (e.g., for CWEs), and document that
2014-07-13 13:19:50 -04:00
David A. Wheeler
620a6df894
Document CWEs covered by flawfinder
2014-07-13 09:53:15 -04:00
David A. Wheeler
289f341f90
Add ability to list CWEs in source code
2014-07-13 09:44:34 -04:00
David A. Wheeler
c1211121bf
ChangeLog: Record the new capabilities.
2014-07-13 00:20:56 -04:00
David A. Wheeler
9de8db2e74
Add Common Weakness Enumeration (CWE) references
2014-07-13 00:06:04 -04:00
David A. Wheeler
62af9ec2d5
flawfinder.1: Various minor man page improvements
2014-07-12 23:07:38 -04:00
David A. Wheeler
af33f0e3e9
flawfinder.1: Clarify explanation of patchfile option
2014-07-12 22:35:12 -04:00
David A. Wheeler
5a56f2667d
flawfinder: Simplify string check
2014-07-12 22:24:02 -04:00
David A. Wheeler
1d9a870d77
Add support for git diff (as well as svn diff and GNU diff)
2014-07-12 21:36:54 -04:00
David A. Wheeler
7ebfb3bbb6
Mention "git diff"
2014-07-12 21:06:45 -04:00
David A. Wheeler
9dda4624dc
makefile: Allow "make dist" as synonym for "make distribute"
2014-07-12 20:58:32 -04:00
David A. Wheeler
923cf6042c
Rewrite documentation in man page and --help option for clarity
...
- Group options in --help, just like the man page, for clarity
- Create a new group, "Selecting Input Data", so that they are
clearly distinguished from selecting what hits to display.
- Other clarifications in the man page.
2014-07-12 20:43:04 -04:00
David A. Wheeler
23fe9f27c5
Document --listrules in man page
2014-07-12 19:24:32 -04:00
David A. Wheeler
16caee60e0
flawfinder.1: Add missing period.
2014-07-12 19:22:14 -04:00
David A. Wheeler
981d4203b1
makefile: Use MKDIR_P for portability
2014-07-12 12:28:58 -04:00
David A. Wheeler
202bf127dc
Handle unbalanced double-quotes in sprintf
...
- Handle unbalanced double-quotes. This is a compilation error, but
we can handle it more gracefully.
2014-07-12 12:25:59 -04:00
David A. Wheeler
40982f89ba
Warn that time info is approximate
...
- We can't give exact times, in particular, the start time
is measured only after Python finishes starting up.
So, warn about that.
2014-07-12 12:11:26 -04:00
David A. Wheeler
e95f94db75
Fix report on time executed (fix bug#7)
...
- The time reported was wrong in a misguided attempt to round.
2014-07-12 12:07:24 -04:00
David A. Wheeler
dca1931902
Change flawfinder.spec to comply with Fedora guidelines (fix bug#4)
...
- Thanks to Horst H. von Brand vonbrand,at,inf.utfsm.cl
2014-07-12 11:56:11 -04:00
David A. Wheeler
400b58817c
Allow "flawfinder ." (fix bug#3)
...
- Skipping dotdir also skipped ".", but it shouldn't.
- My thanks to Gerd, who provided the patch
2014-07-12 11:40:22 -04:00
David A. Wheeler
f372da2530
Fix ignore directive when filenames differ (fix bug#6)
...
- My thanks to Bernhard Herzog who provided the patch!
2014-07-12 11:31:45 -04:00
David A. Wheeler
1623be3119
Document -F option in help output
2014-07-12 11:25:11 -04:00
David A. Wheeler
f5e02e9ec2
Version number now 1.28, add test for filenames without trailing newline
2014-07-12 07:01:23 -04:00
David A. Wheeler
8674d33858
flawfinder: Fix patch so line number count is correct
2014-07-12 06:46:14 -04:00
David A. Wheeler
3bdc1db866
flawfinder: Handle files not ending in newline (from Alexis Wilke)
...
- Thanks to Alexis Wilke!
2014-07-12 06:21:34 -04:00
David A. Wheeler
02052dc7d4
Update test results (released 1.27 includes this)
2013-08-25 09:41:06 -04:00
dwheeler
0ee2ef113c
Modify ChangeLog - ready for version 1.27
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@18 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:23:50 +00:00
dwheeler
6e33789344
Add more documentation about --patch
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@17 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:15:06 +00:00
dwheeler
85ed86f2c0
Note in ChangeLog that we've fixed the divide-by-zero when no code found
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@16 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:28:20 +00:00
dwheeler
193d33d157
Fix README; the file is INSTALL.txt not INSTALL
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@15 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:26:02 +00:00
dwheeler
1331cd7aae
Add atoi() and atol(). It's a little lame, but at least it's there.
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@14 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:20:49 +00:00
dwheeler
ec80c6eacd
Clean up getenv text
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@13 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:10:13 +00:00
dwheeler
ed8a7b2a98
Permit .c++ as a C++ extension
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@12 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:07:27 +00:00
dwheeler
130ee2e521
Cleanup: Replaced initial tabs with spaces
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@11 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 14:35:52 +00:00
dwheeler
bff102b656
Cleaned up code for patch handling, fix bug in subdir handling, include patch info in help.
...
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@10 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 14:32:07 +00:00