summaryrefslogtreecommitdiff
path: root/security/pscan/distinfo
AgeCommit message (Collapse)AuthorFilesLines
2005-02-24Add RMD160 digests.agc1-1/+2
2002-08-06PScan is a C source code security scanner, which looks for misuse ofcjs1-0/+5
libc functions which use varargs and printf-style formatting operators. In many situations these can cause security vulnerabilities in the application if it runs with privileges (setugid, or listening to a network socket, etc). An example of the kind of situation pscan looks for is the following: variable = "%s"; /* or malicious user input */ sprintf(buffer, variable); /* BAD! */ WWW: http://www.striker.ottawa.on.ca/~aland/pscan/