Changeset 4640:a115f3ac3b62 for check_sec.sh

Timestamp:

2006-05-18 10:35:29 (3 years ago)

Author:

Rocco Rutte <pdmef@…>

Branch:

HEAD

Message:

Avoid safe_free() usage and add security checks

Add checks to check_sec.sh for memory functions.

These include a check for use of safe_free() instead of FREE() and a
check whether FREE(&...) is used.

For the former, SAFE_FREE_CHECKED is to be used, for the latter
FREE_CHECKED to avoid messages from check_sec.sh

Files:

• check_sec.sh (modified) (1 diff)

check_sec.sh

@@ -36 +36 @@
 do_check '\<sprintf.*%s' __SPRINTF_CHECKED__ "Alert: Unchecked sprintf calls."
 do_check '\<strncat' __STRNCAT_CHECKED__ "You probably meant safe_strcat here."
+do_check '\<safe_free' __SAFE_FREE_CHECKED__ "You probably meant FREE here."
+do_check '\<FREE[ ]?\([^&]' __FREE_CHECKED__ "You probably meant FREE(&...) here."
 
 # don't do this check on others' code.