Subject: CVS commit: pkgsrc/security/pscan
From: Curt Sampson
Date: 2002-08-06 03:37:00
Message id: 20020806013700.B965EB42C@cvs.netbsd.org

Log Message:
PScan is a C source code security scanner, which looks for misuse of
libc functions which use varargs and printf-style formatting
operators. In many situations these can cause security vulnerabilities
in the application if it runs with privileges (setugid, or listening
to a network socket, etc).

An example of the kind of situation pscan looks for is the following:

  variable = "%s";                   /* or malicious user input */
  sprintf(buffer, variable);         /* BAD! */

WWW: http://www.striker.ottawa.on.ca/~aland/pscan/


Files:
RevisionActionfile
1.1importpkgsrc/security/pscan/Makefile
1.1importpkgsrc/security/pscan/DESCR
1.1importpkgsrc/security/pscan/PLIST
1.1importpkgsrc/security/pscan/distinfo
1.1importpkgsrc/security/pscan/patches/patch-aa