在审查前使用 Flawfinder 扫描 C 和 C++ 代码中的风险函数模式
Run a fast secure-code triage pass over C and C++ sources before manual review or remediation planning begins.
Prerequisites
Flawfinder installation, C or C++ source tree, terminal access, reviewer workflow for validating findings
Installation
Requirements and caveats from upstream:
- command line tool. It requires Python (we test with Python 3;
- Python 2.7 should work but this is increasingly untested).
- Python's "pip" or with your system's package manager (flawfinder has
Basic usage or getting-started notes:
- If you just want to use it, you can install flawfinder with
- packages for many systems). It also supports easy installation
- following usual make install source installation conventions.
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/david-a-wheeler/flawfinder/HEAD/README.md
Documentation
- https://dwheeler.com/flawfinder/
