There are different approaches, and which one you want to use depends on your goals.
You'll get the fastest results by using an existing tool such as lint or one of the million other static souce code checkers.
If you want to invest much time, you could write your own tool like that, but the fact that you asked that question in the first place likely means that it's not the solution your are looking for. There has been quite some research in that area, it's worth looking at the results before writing your own tool.
Finally you can just use a bunch or regexes to search for potentially dangerous stuff (search for system for example).
But it all depends on what you want to achieve. If you tell us, we can help you better. | [reply]
[d/l] |
My goals is to make a project which detect vulnerabilities in c codes and php or one of them
i am afraid that regular expressions would give many fault warnings,I mean about 60% of the results will be correct and the others will be fault
i don't know if using AI will be a good choice or there is a simple and better way than using AI
i really appreciate your reply
| [reply] |
With that goal in mind I don't see how you can avoid parsing the files, and doing a "real" semantic analysis.
| [reply] |
In other words, you want to write something that will lex, parse, and analyze C and PHP. Those are three separate (though somewhat related) problems. So, first lex and parse the C (or PHP) into a data structure. Then, you analyze that data structure for anything you consider to be a flaw. Take a look at PPI for how to lex and parse a language (in this case, Perl). Alternately, you'll want to use something like flex and yacc (Parse::Flex and Parse::Eyapp are good modules to start with).
My criteria for good software:
- Does it work?
- Can someone else come in, make a change, and be reasonably certain no bugs were introduced?
| [reply] |
The project will be checking the source for specific bugs
like
buffer overflows,heap overflow..etc in C codes
and
remote file include,local file include...etc in php codes
I'll take a look at the 2 modules
thank you alot for your help
| [reply] |