C/C++ variable name/title not always parsed correctly
Code security review tool for C/C++, C#, VB, PHP, Java, PL/SQL, COBOL.
Brought to you by:
npdunn
Menu
▾
▴
Sorry to bombard you with bug reports, but here's some more observations:
1) strcat and strcpy functions are appearing twice in the Results and Summary Table, one entry says
"MEDIUM: Potentially Unsafe Code - strcat" and the other entry shows
"MEDIUM: Potentially Unsafe Code - strcat(" <-- Note that the second entry also includes the left left parenthesis
2) The following example:
if(strlen(method) != 1){ }Causes the function name/title to parse incorrectly, also including the left parenthesis of the condition, for example the title shows "(strlen" instead of just "strlen"