Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Stuart Henderson
On 2012-01-08, Lars nore...@z505.com wrote: What tools are used in OpenBSD for static source code analysis? I guess Lint is considered one tool? Various people have used various tools at various times to look at OpenBSD source code. Besides lint, examples include: clang's static analyser,

Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Mic J
Coverity also i think i remember one of the OpenBSD developers worked/works for coverity There is open source projects scanning. Also look in the archives there are several interesting threads try f.ex using coverity in your search. there is a list of tools on wikipedia !!!

Re: Ted Unangst Static Source Code Analysis

2012-01-08 Thread Ted Unangst
On Sat, Jan 07, 2012, Lars wrote: What tools are used in OpenBSD for static source code analysis? I guess Lint is considered one tool? Do you, Ted, use other tools than Lint? This post is not just meant to be sent for Ted, of course anyone else could reply if they know about source code

Ted Unangst Static Source Code Analysis

2012-01-07 Thread Lars
I was watching an older video regarding Static Source code analysis to make code more secure. I especially enjoyed your comments about SQL injections and escaping sql which all sorts of websites forget to do. What tools are used in OpenBSD for static source code analysis? I guess Lint is

Re: Ted Unangst Static Source Code Analysis

2012-01-07 Thread Tomas Bodzar
On Sun, Jan 8, 2012 at 1:04 AM, Lars nore...@z505.com wrote: I was watching an older video regarding Static Source code analysis to make code more secure. B I especially enjoyed your comments about SQL injections and escaping sql which all sorts of websites forget to do. What tools are used