13
edits
Static Analysis: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 33: | Line 33: | ||
** Chrome never evals a content-tainted string. | ** Chrome never evals a content-tainted string. | ||
** C++ never snprintfs using a content-tainted string. | ** C++ never snprintfs using a content-tainted string. | ||
* SpiderMonkey Exact-GC safety bugs. [GC_SafetySpec] | * SpiderMonkey Exact-GC safety bugs. See the [[GC_SafetySpec]] page for the latest. | ||
** "Not stored in the heap" pointer dataflow analysis. | ** "Not stored in the heap" pointer dataflow analysis. Update: finding pointers to stack objects stored on the heap or in a global is now a feature of Oink. | ||
* Dataflow enforcement of correct API usage (CQual++): | * Dataflow enforcement of correct API usage (CQual++): | ||
** String character set encoding mistakes. | ** String character set encoding mistakes. | ||