CVS webwml/dutch/security/audit/examples
Update of /cvs/webwml/webwml/dutch/security/audit/examples
In directory gluck:/tmp/cvs-serv8023/dutch/security/audit/examples
Modified Files:
RATS.wml flawfinder.wml pscan.wml
Log Message:
make RATS valid html strict and unify example outprint
--- /cvs/webwml/webwml/dutch/security/audit/examples/RATS.wml 2005/06/24 09:15:10 1.8
+++ /cvs/webwml/webwml/dutch/security/audit/examples/RATS.wml 2005/12/07 18:27:42 1.9
@@ -2,8 +2,8 @@
#use wml::debian::recent_list
#use wml::debian::translation-check translation="1.10"
-# Last Translation Update by $Author: thuriaux $
-# Last Translation Update at $Date: 2005/06/24 09:15:10 $
+# Last Translation Update by $Author: witch $
+# Last Translation Update at $Date: 2005/12/07 18:27:42 $
<p><a href="http://packages.debian.org/rats";>RATS</a> is een algemene scanner
voor detectie van potentiële veiligheidsproblemen in een aantal
@@ -40,64 +40,77 @@
<p>RATS uitvoeren tegen onze <a href="test.c.html">voorbeeldcode</a> geeft
volgende uitvoer:</p>
<hr />
-<blockquote>
- <b>Severity: High</b><br />
- Issue: fixed size global buffer<br/>
- Extra care should be taken to ensure that character arrays that are
- allocated on the stack are used safely. They are prime targets for
- buffer overflow attacks.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-10 11 12 </li></ul>
- <b>Severity: High</b><br/>
- Issue: strcpy<br/>
+<div class="sampleblock">
+<h3>Severity: High</h3>
+<p>Issue: fixed size global buffer</p>
+<p>
+ Extra care should be taken to ensure that character arrays that are
+ allocated on the stack are used safely. They are prime targets for
+ buffer overflow attacks.
+</p>
+<p>
+File: <b>test.c</b><br>
+Lines: 10 11 12
+</p>
+
+<h3>Severity: High</h3>
+<p>Issue: strcpy</p>
+<p>
Check to be sure that argument 2 passed to this function call will not
copy more data than can be handled, resulting in a buffer overflow.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-18 </li></ul>
- <b>Severity: High</b><br/>
- Issue: getenv<br/>
- Environment variables are highly untrustable input. They may be of any length, and contain any data. Do not make any assumptions regarding content or length. If at all possible avoid using them, and if it is necessary, sanitize them and truncate them to a reasonable length.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-22 24 </li></ul>
- <b>Severity: High</b><br/>
- Issue: sprintf<br/>
+ </p>
+<p>
+File: <b>test.c</b><br>
+Lines: 18
+</p>
+
+<h3>Severity: High</h3>
+<p>Issue: getenv</p>
+<p>Environment variables are highly untrustable input. They may be of any length, and contain any data. Do not make any assumptions regarding content or length. If at all possible avoid using them, and if it is necessary, sanitize them and truncate them to a reasonable length.
+ </p>
+<p>
+File: <b>test.c</b><br>
+Lines: 22 24 </p>
+
+<h3>Severity: High</h3>
+<p>Issue: sprintf</p>
+<p>
Check to be sure that the format string passed as argument 2 to this
function call does not come from an untrusted source that could have added
formatting characters that the code is not prepared to handle.
Additionally, the format string could contain `%s' without precision that
could result in a buffer overflow.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-24 </li></ul>
- <b>Severity: High</b><br/>
- Issue: popen<br/>
+</p>
+<p>
+File: <b>test.c</b><br>
+Lines: 24 </p>
+
+<h3>Severity: High</h3>
+<p>Issue: popen</p>
+<p>
Argument 1 to this function call should be checked to ensure that it does
not come from an untrusted source without first verifying that it contains
nothing dangerous.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-33 </li></ul>
- <b>Severity: High</b><br/>
- Issue: printf<br/>
+</p>
+<p>
+File: <b>test.c</b><br>
+Lines: 33 </p>
+
+<h3>Severity: High</h3>
+<p> Issue: printf</p>
+<p>
Check to be sure that the non-constant format string passed as argument 1
to this function call does not come from an untrusted source that could
have added formatting characters that the code is not prepared to handle.
- <br/>
-<ul style="list-style-type: none;"><li>
-File: <b>./test.c</b><br/>Lines:
-42 </li></ul>
+</p>
+<p>
+File: <b>test.c</b><br>
+Lines: 42 </p>
+<p>
Total lines analyzed: <b>49</b><br>
-Total time <b>0.001723</b> seconds<br>
-<b>28438</b> lines per second<br>
-</blockquote>
+Total time <b>0.000288</b> seconds<br>
+<b>170138</b> lines per second</p>
+</div>
<hr />
<p>Deze uitvoer is nogal lijvig, ondanks dat de code zelf vrij kort is - dit
toont één van de nadelen van geautomatiseerd scannen: het grote volume aan
--- /cvs/webwml/webwml/dutch/security/audit/examples/flawfinder.wml 2005/05/26 16:49:17 1.3
+++ /cvs/webwml/webwml/dutch/security/audit/examples/flawfinder.wml 2005/12/07 18:27:42 1.4
@@ -2,8 +2,8 @@
#use wml::debian::recent_list
#use wml::debian::translation-check translation="1.6"
-# Last Translation Update by $Author: luk $
-# Last Translation Update at $Date: 2005/05/26 16:49:17 $
+# Last Translation Update by $Author: witch $
+# Last Translation Update at $Date: 2005/12/07 18:27:42 $
<p><a href="http://packages.debian.org/flawfinder";>flawfinder</a> is een
algemene scanner voor het vinden en rapporteren van potentiële lekken in C- en
@@ -46,7 +46,7 @@
geeft volgende uitvoer:</p>
<hr />
-<blockquote>
+<div class="sampleblock">
<p>
Examining test.c <br>
<ul>
@@ -82,7 +82,7 @@
<br>
Number of Lines Analyzed = 48 in 0.53 seconds (1392 lines/second)
<br>
-</blockquote>
+</div>
<hr />
<h2>De uitvoer begrijpen</h2>
--- /cvs/webwml/webwml/dutch/security/audit/examples/pscan.wml 2004/12/22 00:30:03 1.2
+++ /cvs/webwml/webwml/dutch/security/audit/examples/pscan.wml 2005/12/07 18:27:42 1.3
@@ -2,8 +2,8 @@
#use wml::debian::recent_list
#use wml::debian::translation-check translation="1.4"
-# Last Translation Update by $Author: jseidel $
-# Last Translation Update at $Date: 2004/12/22 00:30:03 $
+# Last Translation Update by $Author: witch $
+# Last Translation Update at $Date: 2005/12/07 18:27:42 $
<p><a href="http://packages.debian.org/pscan";>pscan</a> is een pakket dat is
ontworpen om C- en C++-broncodebestanden aan een formaatstringaudit te
@@ -18,9 +18,9 @@
</pre>
<p>De uitvoer zal rechtstreeks naar de console worden uitgeschreven:</p>
<hr />
-<pre>
+<samp>
test.c:42 SECURITY: printf call should have "%s" as argument 0
-</pre>
+</samp>
<hr />
<h2>De Uitvoer</h2>
Reply to: