Initial import of its4, a static C/C++ code scanner for potential

security problems

5 files changed, 51 insertions, 0 deletions

diff --git a/devel/its4/Makefile b/devel/its4/Makefile
new file mode 100644
index 00000000000..1a0ed3426a1
--- /dev/null
+++ b/devel/its4/Makefile
@@ -0,0 +1,29 @@
+# $NetBSD: Makefile,v 1.1.1.1 2000/02/23 01:29:52 wiz Exp $
+#
+
+DISTNAME=	its4-1.0
+CATEGORIES=	devel
+MASTER_SITES=	# have to fetch for yourself, or from a NetBSD mirror
+EXTRACT_SUFX=	.tgz
+
+MAINTAINER=	packages@netbsd.org
+HOMEPAGE=	http://www.rstcorp.com/its4/
+
+LICENSE=        no-commercial-use
+
+USE_CONFIGURE=	YES
+
+CONFIGURE_ARGS+=	--prefix=${PREFIX}
+CONFIGURE_ARGS+=	--datadir=${PREFIX}/share/its4
+
+do-configure:
+	cd ${WRKSRC} && ./configure ${CONFIGURE_ARGS}
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/its4 ${PREFIX}/bin
+	${INSTALL_MAN} ${WRKSRC}/docs/its4.1 ${PREFIX}/man/man1
+	${INSTALL_DATA_DIR} ${PREFIX}/share/its4
+	cd ${WRKSRC} && ${INSTALL_DATA} LICENCE TODO vulns.i4d \
+		${PREFIX}/share/its4
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/devel/its4/files/md5 b/devel/its4/files/md5
new file mode 100644
index 00000000000..758f7369f61
--- /dev/null
+++ b/devel/its4/files/md5
@@ -0,0 +1,3 @@
+$NetBSD: md5,v 1.1.1.1 2000/02/23 01:29:53 wiz Exp $
+
+MD5 (its4-1.0.tgz) = bcf4c815b8d6d114e98b78e8db03141d
diff --git a/devel/its4/pkg/COMMENT b/devel/its4/pkg/COMMENT
new file mode 100644
index 00000000000..fe61e92a625
--- /dev/null
+++ b/devel/its4/pkg/COMMENT
@@ -0,0 +1 @@
+static C/C++ code scanner for potential security problems
diff --git a/devel/its4/pkg/DESCR b/devel/its4/pkg/DESCR
new file mode 100644
index 00000000000..2cf1c03525b
--- /dev/null
+++ b/devel/its4/pkg/DESCR
@@ -0,0 +1,11 @@
+ITS4 -- It's the software, stupid! (Security Scanner)
+
+ITS4 is a tool that statically scans C and C++ source code for
+potential security vulnerabilities.  It is a command-line tool that
+works across Unix environments (hopefully) and will also work under
+Windows with CygWin installed.  ITS4 scans code, looking for function
+calls that are potentially dangerous.  For some calls, ITS4 tries to
+perform some code analysis to determine how risky the call is.  In
+each case, ITS4 provides a problem report, including a short
+description of the potential problem and suggestions on how to fix the
+code.
diff --git a/devel/its4/pkg/PLIST b/devel/its4/pkg/PLIST
new file mode 100644
index 00000000000..a286172215f
--- /dev/null
+++ b/devel/its4/pkg/PLIST
@@ -0,0 +1,7 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2000/02/23 01:29:53 wiz Exp $
+bin/its4
+man/man1/its4.1
+share/its4/LICENCE
+share/its4/TODO
+share/its4/vulns.i4d
+@dirrm share/its4