Re: [fuzzing] Coverage and a recent paper by L. Suto

[Nicolas RUFF <nruff () security-labs org>]

> Using the following perl script two buffer overflows are detected:
> cat vuln.c | perl -ne '/rnd\[i\]/ and print "Buffer overflow!\n"'
> This post does have a point. Discuss among yourselves.

Is this vendor bashing, maybe ? ;)

BTW, since you wrote your own static analyzer [*], I guess you could
share insights on the matter.

[*] http://gcc.vulncheck.org/

Regards,
- Nicolas RUFF
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave