Re: Open Source Code Review

 Angus wrote:

> Is anyone aware of any open source code review
> programs.  I'd like to know if there are any that deal
> with all aspects of security, including but not
> limited to efficiency and breakin/overflow issues.  In
> paticular, I'd like one for Coldfusion, however any
> others would be appreciated.  

	There are a lot of the so called source code scanners. The most
popular ones are:

splint (http://www.splint.org/),
flawfinder (http://www.dwheeler.com/flawfinder/),
its4 (http://www.cigital.com/its4/),
rats (http://www.securesw.com/rats/). But it's strongly recommended
you'll do manual inspection of your code. 

-Roman Bogorodskiy

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iQEVAwUBQIqd3ipMDQ8aPhy0AQKxIgf/fwtrct9ng16sjGsdTHIUOs6F9+aiFwOf
9O78di3eTQ9exd/qxbTkJYv2P3dEDNR8X4ZTLApzrTbkY4hn/ew4GTxM3B0NVn9q
UMaTiqNngaO7BXOJE3ZZckIFMCB3x+PasKBw6dAZjb/WfPXGIJKIES2FwMSrCuy9
z3o59hdaHx0ZR5a1eXaCnN8aeYVcpm1iZcYfk5g6kE7JfFK6yHGQdeLJ+2ZFb/V8
1HD8NgQw4zxomgEsQFHPRmZ+KqcBjcV7sA8vFPWvfFCZ9L5/OVQ0wXbhFi5ipwGh
DDx1Lc0VEsJBxu/N2PpZI0RdQKjeOxpcK6N+SLGWRuu8TgMZYhbVIg==
=t74x
-----END PGP SIGNATURE-----