FYI, interesting article on eSecurityPlanet regarding Fortify's commercial source code scanning tool -- see the full text at http://www.esecurityplanet.com/patches/article.php/3439021
Among other things, the article says, "In addition to new language support for C# -- the software already supports C, C++, PL/SQL, Java Server Pages (JSP) and Java -- Fortify has added four new analyzers, a rules manager and an audit manager to prioritize the level of software flaws." Cheers, Ken van Wyk -- KRvW Associates, LLC http://www.KRvW.com
