oss-sec mailing list archives
Re: Security vulnerability tools
From: Andreas Ericsson <ae () op5 se>
Date: Thu, 28 Mar 2013 09:39:23 +0100
On 03/27/2013 08:54 PM, Corey Bryant wrote:
Hi, I'd like to get a better understanding of tools used in the open source community (kernel and user space) to detect security vulnerabilities. I have a list below to get started. If anyone has any input, I'd appreciate it! I'll plan on updating http://oss-security.openwall.org/wiki/tools with anything it doesn't already have.
sparse works similarly to clang. It was hacked up by the kernel folks for finding potential errors in the linux kernel. I like it particularly because it has very few false positives, unlike most other tools I've tried. That means it's actually viable to strive for "no warnings" from it and run it as part of automated testsuites. -- Andreas Ericsson andreas.ericsson () op5 se OP5 AB www.op5.se Tel: +46 8-230225 Fax: +46 8-230231 Considering the successes of the wars on alcohol, poverty, drugs and terror, I think we should give some serious thought to declaring war on peace.
Current thread:
- Re: [kernel-hardening] Security vulnerability tools, (continued)
- Re: [kernel-hardening] Security vulnerability tools Tim Brown (Mar 27)
- Re: Re: [kernel-hardening] Security vulnerability tools Corey Bryant (Mar 27)
- Re: Re: [kernel-hardening] Security vulnerability tools Steve Grubb (Mar 28)
- Re: Re: [kernel-hardening] Security vulnerability tools Tim Brown (Mar 28)
- Re: Re: [kernel-hardening] Security vulnerability tools Corey Bryant (Mar 27)
- Re: [kernel-hardening] Security vulnerability tools Tim Brown (Mar 27)
- Re: Security vulnerability tools Solar Designer (Mar 27)
- Re: [kernel-hardening] Re: Security vulnerability tools Corey Bryant (Mar 27)
- Re: Security vulnerability tools Solar Designer (Mar 28)
- Re: [kernel-hardening] Re: Security vulnerability tools Corey Bryant (Mar 27)
- Re: Security vulnerability tools Russ Allbery (Mar 27)
- Re: Security vulnerability tools Corey Bryant (Mar 27)
- Re: Security vulnerability tools Murray McAllister (Mar 27)
- Re: Security vulnerability tools Andreas Ericsson (Mar 28)
- Re: Security vulnerability tools Corey Bryant (Mar 29)
- Re: Re: Security vulnerability tools Raphael Geissert (Mar 29)