[Xcb] tool for detecting security holes

Vincent Torri Vincent.Torri at iecn.u-nancy.fr
Fri Jun 9 22:47:20 PDT 2006


Hello,

On #edevelop, a guy gave a link to splint, a program that looks for
'security vulnerabilities and coding mistakes'.

I've tried it on several xcb-based programs. Hehe, there are several
warnings.

The 'link' web page is also interesting, as it gives numerous links about
how to write safe code or o detect baaaaad code.

I also like that citation on the main splint web page :

"Two types have compatible type if their types are the same.
  ---ANSI C Standard, 3.1.2.6."

:-)

Vincent


More information about the Xcb mailing list