Re: Open Source Code Review

"David A. Wheeler" <[email protected]>
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]> 
Angus asked:

>Is anyone aware of any open source code review
>programs.  I'd like to know if there are any that deal
>with all aspects of security, including but not
>limited to efficiency and breakin/overflow issues.  In
>paticular, I'd like one for Coldfusion, however any
>others would be appreciated.  
>
Not for Coldfusion, but here are some:

flawfinder http://www.dwheeler.com/flawfinder
RATS http://www.securesw.com/rats
SPLINT http://splint.org

The flawfinder page links to several others.
See also:
http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/tools.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.