Gareth Nelson wrote:
This reminds me........
[gar...@lovely indra]$ grep -iR "Flawfinder: ignore" newview/*.cpp | wc -l
858

Is flawfinder used internally already?

We haven't used it in at least three years. I think those turds indicate why an analysis tool that requires you to annotate the source code itself to squelch false positives is a non-starter.
_______________________________________________
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/SLDev
Please read the policies before posting to keep unmoderated posting privileges

Reply via email to