| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Mon, 15 Jul 2013 11:15:13 +0300 From: Dan Carpenter <dan.carpenter@...cle.com> To: smatch@...r.kernel.org Cc: linux-kernel@...r.kernel.org Subject: smatch v1.59 released Smatch is a C static checker with a lot of kernel specific checks. This release has several new tricks: 1) Small functions are parsed inline now. That makes it more accurate and now even without the database configured, you have at least some cross function analysis. 2) The way smatch handles math was completely rewritten and should be more accurate. 3) Comparisons between variables are recorded. So even if you don't know the return value, maybe you know that it is less than or equal to parameter 2. (This requires the database to be set up). Btw, having the database set up is super useful for understanding code. Say you want to know how lifebook_limit_serio3() is called you can type: `smbdb.py lifebook_limit_serio3` and it's simple enough to see that (struct dmi_system_id)->callback() is called from dmi_check_system(). The command to set up the database is: ~/path/to/smatch/smatch_scripts/build_kernel_data.sh To run smatch on the kernel source: ~/path/to/smatch/smatch_scripts/test_kernel.sh To test a specific file: ~/path/to/smatch/smatch_scripts/kchecker drivers/file.c regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists