Static Analysis: Difference between revisions

Static Analysis (view source)

15 bytes removed , 18 January 2007

no edit summary

13

edits

@@ Line 34: / Line 34: @@
 ** C++ never snprintfs using a content-tainted string.
 * SpiderMonkey Exact-GC safety bugs.  See the [[GC_SafetySpec]] page for the latest.
-** "Not stored in the heap" pointer dataflow analysis.  Update: finding pointers to stack objects stored on the heap or in a global is now a feature of Oink.
+** "Not stored in the heap" pointer dataflow analysis.  '''Works''': finding pointers to stack stored on heap/global is now a feature of Oink.
 * Dataflow enforcement of correct API usage (CQual++):
 ** String character set encoding mistakes.