Commit Graph

61 Commits

Author SHA1 Message Date
David A. Wheeler f980d02e2d ChangeLog: Document major changes 2014-07-19 19:26:39 -04:00
David A. Wheeler 8423c14116 Fix up "make show-cwes" 2014-07-19 19:21:23 -04:00
David A. Wheeler 60948e8368 Move CWE-119 report on char into warning instead of recommendation 2014-07-19 19:16:41 -04:00
David A. Wheeler dcf40ef8fd Modify test suite - also check generated HTML 2014-07-19 19:10:12 -04:00
David A. Wheeler cfe1a062fe Tweak mappings to CWE. strlen() better maps to CWE-126 (buffer over-read) 2014-07-19 19:05:49 -04:00
David A. Wheeler e0c0b9bc8e flawfinder.1: Minor documentation improvements, including removing blank lines 2014-07-19 18:38:24 -04:00
David A. Wheeler 4156a4199c flawfinder.1: Refine man page (esp. CWE discussion) 2014-07-19 17:23:10 -04:00
David A. Wheeler 7112bf164c Rewrite print_multi_line. It's now shorter, faster, and formats better 2014-07-19 16:42:14 -04:00
David A. Wheeler f9a6fdd314 Add links to CWE entries when producing HTML, and tweak output report 2014-07-19 16:20:14 -04:00
David A. Wheeler 5c66efaf2b Update version# and years 2014-07-19 13:00:58 -04:00
David A. Wheeler a7a7bb349b Modify documentation for listrules, and add CWE mapping info 2014-07-19 12:58:15 -04:00
David A. Wheeler 742cb6db13 flawfinder: Modify --listrules to also report default warning 2014-07-19 12:58:02 -04:00
David A. Wheeler df397eaf46 makefile: Modify "make clean" so it erases junk cve[.exe] 2014-07-13 15:11:32 -04:00
David A. Wheeler dcf7c7ff40 flawfinder.1: Expand CWE description and make other small improvements 2014-07-13 15:05:55 -04:00
David A. Wheeler 622add482e flawfinder.1: Minor tweaks 2014-07-13 13:49:51 -04:00
David A. Wheeler e97d0e6c18 flawfinder.1: Minor text cleanup about CWEs 2014-07-13 13:30:29 -04:00
David A. Wheeler ba451aceb7 Update dates 2014-07-13 13:21:40 -04:00
David A. Wheeler bd3bd7dae5 Add ability to search in warnings (e.g., for CWEs), and document that 2014-07-13 13:19:50 -04:00
David A. Wheeler 620a6df894 Document CWEs covered by flawfinder 2014-07-13 09:53:15 -04:00
David A. Wheeler 289f341f90 Add ability to list CWEs in source code 2014-07-13 09:44:34 -04:00
David A. Wheeler c1211121bf ChangeLog: Record the new capabilities. 2014-07-13 00:20:56 -04:00
David A. Wheeler 9de8db2e74 Add Common Weakness Enumeration (CWE) references 2014-07-13 00:06:04 -04:00
David A. Wheeler 62af9ec2d5 flawfinder.1: Various minor man page improvements 2014-07-12 23:07:38 -04:00
David A. Wheeler af33f0e3e9 flawfinder.1: Clarify explanation of patchfile option 2014-07-12 22:35:12 -04:00
David A. Wheeler 5a56f2667d flawfinder: Simplify string check 2014-07-12 22:24:02 -04:00
David A. Wheeler 1d9a870d77 Add support for git diff (as well as svn diff and GNU diff) 2014-07-12 21:36:54 -04:00
David A. Wheeler 7ebfb3bbb6 Mention "git diff" 2014-07-12 21:06:45 -04:00
David A. Wheeler 9dda4624dc makefile: Allow "make dist" as synonym for "make distribute" 2014-07-12 20:58:32 -04:00
David A. Wheeler 923cf6042c Rewrite documentation in man page and --help option for clarity
- Group options in --help, just like the man page, for clarity
  - Create a new group, "Selecting Input Data", so that they are
    clearly distinguished from selecting what hits to display.
  - Other clarifications in the man page.
2014-07-12 20:43:04 -04:00
David A. Wheeler 23fe9f27c5 Document --listrules in man page 2014-07-12 19:24:32 -04:00
David A. Wheeler 16caee60e0 flawfinder.1: Add missing period. 2014-07-12 19:22:14 -04:00
David A. Wheeler 981d4203b1 makefile: Use MKDIR_P for portability 2014-07-12 12:28:58 -04:00
David A. Wheeler 202bf127dc Handle unbalanced double-quotes in sprintf
- Handle unbalanced double-quotes.  This is a compilation error, but
    we can handle it more gracefully.
2014-07-12 12:25:59 -04:00
David A. Wheeler 40982f89ba Warn that time info is approximate
- We can't give exact times, in particular, the start time
    is measured only after Python finishes starting up.
    So, warn about that.
2014-07-12 12:11:26 -04:00
David A. Wheeler e95f94db75 Fix report on time executed (fix bug#7)
- The time reported was wrong in a misguided attempt to round.
2014-07-12 12:07:24 -04:00
David A. Wheeler dca1931902 Change flawfinder.spec to comply with Fedora guidelines (fix bug#4)
- Thanks to Horst H. von Brand vonbrand,at,inf.utfsm.cl
2014-07-12 11:56:11 -04:00
David A. Wheeler 400b58817c Allow "flawfinder ." (fix bug#3)
- Skipping dotdir also skipped ".", but it shouldn't.
  - My thanks to Gerd, who provided the patch
2014-07-12 11:40:22 -04:00
David A. Wheeler f372da2530 Fix ignore directive when filenames differ (fix bug#6)
- My thanks to Bernhard Herzog who provided the patch!
2014-07-12 11:31:45 -04:00
David A. Wheeler 1623be3119 Document -F option in help output 2014-07-12 11:25:11 -04:00
David A. Wheeler f5e02e9ec2 Version number now 1.28, add test for filenames without trailing newline 2014-07-12 07:01:23 -04:00
David A. Wheeler 8674d33858 flawfinder: Fix patch so line number count is correct 2014-07-12 06:46:14 -04:00
David A. Wheeler 3bdc1db866 flawfinder: Handle files not ending in newline (from Alexis Wilke)
- Thanks to Alexis Wilke!
2014-07-12 06:21:34 -04:00
David A. Wheeler 02052dc7d4 Update test results (released 1.27 includes this) 2013-08-25 09:41:06 -04:00
dwheeler 0ee2ef113c Modify ChangeLog - ready for version 1.27
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@18 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:23:50 +00:00
dwheeler 6e33789344 Add more documentation about --patch
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@17 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-17 02:15:06 +00:00
dwheeler 85ed86f2c0 Note in ChangeLog that we've fixed the divide-by-zero when no code found
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@16 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:28:20 +00:00
dwheeler 193d33d157 Fix README; the file is INSTALL.txt not INSTALL
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@15 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:26:02 +00:00
dwheeler 1331cd7aae Add atoi() and atol(). It's a little lame, but at least it's there.
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@14 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:20:49 +00:00
dwheeler ec80c6eacd Clean up getenv text
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@13 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:10:13 +00:00
dwheeler ed8a7b2a98 Permit .c++ as a C++ extension
git-svn-id: svn+ssh://svn.code.sf.net/p/flawfinder/code/trunk@12 5c01084b-1f27-0410-9f85-80411afe95dc
2007-01-16 23:07:27 +00:00