13
edits
Static Analysis: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 33: | Line 33: | ||
** Chrome never evals a content-tainted string. | ** Chrome never evals a content-tainted string. | ||
** C++ never snprintfs using a content-tainted string. | ** C++ never snprintfs using a content-tainted string. | ||
* SpiderMonkey Exact-GC safety bugs. | * SpiderMonkey Exact-GC safety bugs. [GC_SafetySpec] | ||
** "Not stored in the heap" pointer dataflow analysis. | ** "Not stored in the heap" pointer dataflow analysis. | ||
*** DONE: This is done and is now a feature of Oink. | |||
* Dataflow enforcement of correct API usage (CQual++): | * Dataflow enforcement of correct API usage (CQual++): | ||
** String character set encoding mistakes. | ** String character set encoding mistakes. | ||