CODE WRITING IS NOT NEEDED
Find a static analysis tool.
Run a static analysis of the Newspaper Audit Code example.
Report on which identified bugs are valid.
Provide a screen shot of the output of your static scan and your analysis of the output.
Conduct an architectural analysis of the Newspaper Audie Code example.
Identify and explain the architectural flaws you find
For the project, you need to find several examples of potential bugs/flaws that are bugs/flaws and several that are not bugs/flaws. Tell me if you think it is a bug or a flaw, and is it a vulnerability? You need to walk me through you analysis, e.g. if a buffer or variable is defined to be a specific size, then show me the code and line number. You need to give me all the info I need to see how you analyzed the code
You just need to see the flaw list and write down why does it crash the code or why it is not correct
—–
I already used a static analysis tool (flawfinder) to find some flaws,
0 comments