Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Ted Unangst
On Sat, Jan 07, 2012, Lars wrote: > What tools are used in OpenBSD for static source code analysis? I guess > Lint is considered one tool? Do you, Ted, use other tools than Lint? > This post is not just meant to be sent for Ted, of course anyone else > could reply if they know about source code a

Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Mic J
Coverity also i think i remember one of the OpenBSD developers worked/works for coverity There is open source projects scanning. Also look in the archives there are several interesting threads try f.ex using coverity in your search. there is a list of tools on wikipedia !!! http://en.wikipedia

Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Stuart Henderson
On 2012-01-08, Lars wrote: > What tools are used in OpenBSD for static source code analysis? I guess > Lint is considered one tool? Various people have used various tools at various times to look at OpenBSD source code. Besides lint, examples include: clang's static analyser, cppcheck, parfait (

Re: Ted Unangst Static Source Code Analysis

2012-01-07 Thread Tomas Bodzar
On Sun, Jan 8, 2012 at 1:04 AM, Lars wrote: > I was watching an older video regarding Static Source code analysis to > make code more secure. B I especially enjoyed your comments about SQL > injections and escaping sql which all sorts of websites forget to do. > > What tools are used in OpenBSD fo