search

david-a-wheeler / flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code
GNU General Public License v2.0
486 stars 82 forks source link

Flawfinder do not support C++11 syntax: lambdas, string literals. #41

Open ystefinko opened 3 years ago

ystefinko commented 3 years ago

Please add support of C++11. We scanned our cpp project and faced issues that neither lambdas no string literals (https://en.cppreference.com/w/cpp/language/string_literal) are not parsed correctly by ./flawfinder.py I can dd more error logs if needed, but I think it's clear from parsing cycles (they are too simple to catch complicated syntax with ; and " symbols)

david-a-wheeler commented 3 years ago

Patches welcome. The string literals look easy. Not sure about the lambdas.