Dailydave mailing list archives

Source Code Analysis


From: kcope <kingcope () gmx net>
Date: Fri, 15 Sep 2006 22:35:21 +0200

Hello List,
I read your talk about source code analysis.
Analyzing c,cpp source code for format string bugs
is really easy. quite some time ago I coded some tool
to catch format string bugs. It's very straightforward.
Don't expect too much of it, however I found  several bugs
with this tool.
To use it just type f.e.:
perl formatfun2.pl "C:\TheFolderWithTheSourceCode"
and it will create a html file with the results. Probably it
could be optimized  because of much false positives, but
hey I like it, it's cute.

Best Regards,
-kingcope

Attachment: formatfun2.zip
Description:

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread: