[Dailydave] Source Code Analysis

[kcope]

Hello List,
I read your talk about source code analysis.
Analyzing c,cpp source code for format string bugs
is really easy. quite some time ago I coded some tool
to catch format string bugs. It's very straightforward.
Don't expect too much of it, however I found  several bugs
with this tool.
To use it just type f.e.:
perl formatfun2.pl "C:\TheFolderWithTheSourceCode"
and it will create a html file with the results. Probably it
could be optimized  because of much false positives, but
hey I like it, it's cute.

Best Regards,
-kingcope

-------------- next part --------------
A non-text attachment was scrubbed...
Name: formatfun2.zip
Type: application/zip
Size: 1580 bytes
Desc: not available
Url : http://lists.immunitysec.com/pipermail/dailydave/attachments/20060915/97cc5940/attachment-0001.zip