a static analysis tool for finding vulnerabilities in C/C++ source code
Go to file
David A. Wheeler 24b7da535b flawfinder.1: Minor doc cleanups. Note that --listrules works with -D 2014-08-02 21:39:36 -04:00
COPYING Initial import 2007-01-16 02:44:45 +00:00
ChangeLog ChangeLog: Document version differences 2014-07-28 22:06:55 -04:00
INSTALL.txt INSTALL.txt: Simplify text. 2014-07-28 21:41:02 -04:00
MANIFEST.in Initial import 2007-01-16 02:44:45 +00:00
README Tweak README to explain, in a little more detail, what it is. 2014-07-30 23:25:10 -04:00
announcement Initial import 2007-01-16 02:44:45 +00:00
correct-results.html Add cross-link to "Secure Programming" book 2014-07-28 21:25:00 -04:00
correct-results.txt Add cross-link to "Secure Programming" book 2014-07-28 21:25:00 -04:00
cwe.l Add ability to list CWEs in source code 2014-07-13 09:44:34 -04:00
flawfinder flawfinder: Document Python language version issues 2014-07-30 23:45:39 -04:00
flawfinder.1 flawfinder.1: Minor doc cleanups. Note that --listrules works with -D 2014-08-02 21:39:36 -04:00
flawfinder.spec Switch version # to 1.31. 2014-07-27 17:19:24 -04:00
flawtest.c Initial import 2007-01-16 02:44:45 +00:00
junk.c Add support for git diff (as well as svn diff and GNU diff) 2014-07-12 21:36:54 -04:00
makefile makefile: Tweak internal convenience target 2014-07-28 22:09:49 -04:00
no-ending-newline.c Version number now 1.28, add test for filenames without trailing newline 2014-07-12 07:01:23 -04:00
setup.cfg Initial import 2007-01-16 02:44:45 +00:00
setup.py Switch version # to 1.31. 2014-07-27 17:19:24 -04:00
sloctest.c Initial import 2007-01-16 02:44:45 +00:00
test.c Initial import 2007-01-16 02:44:45 +00:00
test2.c Initial import 2007-01-16 02:44:45 +00:00

README

This is "flawfinder" by David A. Wheeler, <dwheeler@dwheeler.com>.
It's a simple Python program for scanning C/C++ source code
for security problems. It uses lexical scanning to find tokens
(such as function names) that suggest likely problems, estimates their
level of risk (e.g., by the text of function calls), and reports the resutlts.

For more information, see:
 http://www.dwheeler.com/flawfinder

See INSTALL.txt for installation instructions.
It is released under the GNU GPL license version 2 or later (GPLv2+).