Dailydave mailing list archives
Source Code Analysis
From: kcope <kingcope () gmx net>
Date: Fri, 15 Sep 2006 22:35:21 +0200
Hello List, I read your talk about source code analysis. Analyzing c,cpp source code for format string bugs is really easy. quite some time ago I coded some tool to catch format string bugs. It's very straightforward. Don't expect too much of it, however I found several bugs with this tool. To use it just type f.e.: perl formatfun2.pl "C:\TheFolderWithTheSourceCode" and it will create a html file with the results. Probably it could be optimized because of much false positives, but hey I like it, it's cute. Best Regards, -kingcope
Attachment:
formatfun2.zip
Description:
_______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Source Code Analysis Dave Aitel (Sep 07)
- Re: Source Code Analysis Alexander Sotirov (Sep 07)
- Re: Source Code Analysis Matt (Sep 07)
- Re: Source Code Analysis Alexander Sotirov (Sep 18)
- Re: Source Code Analysis Matt (Sep 07)
- Re: Source Code Analysis Mateusz Berezecki (Sep 07)
- Re: Source Code Analysis Matt (Sep 07)
- <Possible follow-ups>
- Source Code Analysis kcope (Sep 16)
- Re: Source Code Analysis Alexander Sotirov (Sep 07)