security checkup in source control software

Mads Rasmussen <[email protected]>
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
A friend of mine mentioned that a time ago he worked at a company where 
they used CVS for source control. They implemented routines to scan code 
when cheking in.
That way if a developer checked in code that used banned routines such 
as gets, strcpy etc. he would receive an email as would his manager :-)

A pitty that this behaviour isn't possible with comercial tools such as 
PVCS or Microsofts VSS. Not to my knowledge anyway

Mads
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.