Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Grouping issues by vulnerability title #84

Open
thesp0nge opened this issue May 3, 2024 · 0 comments
Open

Grouping issues by vulnerability title #84

thesp0nge opened this issue May 3, 2024 · 0 comments

Comments

@thesp0nge
Copy link

It will be great having a command line flag telling flawfinder to group findings by security title and not by file and location.

i.e. from this:
./src/file_a.c:89: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
./src/file_b.c:104: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.

to this:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
Found in:
* ./src/file_b.c:104: [2] (buffer) char
* ./src/file_b.c:104: [2] (buffer) char

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant