On 06/13/2013 06:42 PM, Jan Kratochvil wrote:
On Thu, 13 Jun 2013 17:08:44 +0200, Nikola Pajkovsky wrote:
CC'ing Jan
I cannot agree with this approach, doing static analysis from the binary is too late, this is why RH David Malcolm is developing an interface into GCC: https://fedorahosted.org/gcc-python-plugin/
It may be better to ask him personally more about the plugin, I do not know it.
- well that works only if you have the code, our project should be able to help users identify possible threats even in the apps which doesn't come with the source code - besides, the page says: "The project is at an "alpha" level of quality: it works, and ​has uncovered numerous coding errors - but the APIs aren't set in stone yet." - when it's ready it can be used as a first level of defence and ABRT as the last, but from what I understand it's totally unrelated to ABRT
--Jirka