The shockingly obsolete code of bash: http://blog.erratasec.com/2014/09/the-shockingly-bad-code-of-bash.html … (changed title: it's more 'obsolete' than 'bad')
-
@awruef
@0xabad1dea@johnregehr code using "strcpy()" is broken regardless if there are any bugs related to 'strcpy()'
@ErrataRob @awruef @0xabad1dea @johnregehr I think you could make it clearer that you are pointing out code smells and not security props.
-
-
@ErrataRob @awruef@0xabad1dea@johnregehr Plus none of our in-house tools would choke on that code since we mostly use IR. -
@dguido @awruef@0xabad1dea@johnregehr High level static analysis should barf on assignment in expressions - 3 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.