Comments on: Security with Dehydra http://blog.mozilla.com/tglek/2009/02/16/security-with-dehydra/ Just another Blog.mozilla.com weblog Wed, 11 Nov 2009 17:56:44 -0800 http://wordpress.org/?v=2.8.6 hourly 1 By: Brian http://blog.mozilla.com/tglek/2009/02/16/security-with-dehydra/comment-page-1/#comment-21700 Brian Thu, 12 Mar 2009 18:28:39 +0000 http://blog.mozilla.com/tglek/?p=110#comment-21700 To clarify my prior question, I wan to verify that the definition of 'used' for a variable includes the varlue being read by something other than 'a = a'. To clarify my prior question, I wan to verify that the definition of ‘used’ for a variable includes the varlue being read by something other than ‘a = a’.

]]> By: Brian http://blog.mozilla.com/tglek/2009/02/16/security-with-dehydra/comment-page-1/#comment-21699 Brian Thu, 12 Mar 2009 18:17:03 +0000 http://blog.mozilla.com/tglek/?p=110#comment-21699 Can Dehydra be used to analyze source code which might not compile? I have some code that _does_ compile, with a gcc cross-compiler. Given that I have the C++ code for program P and libraries L, J, and K that P uses.... How straightforward would Dehydra be to find all of the variables that don't get used within any of the libraries or the program's non-library code? Can Dehydra be used to analyze source code which might not compile?

I have some code that _does_ compile, with a gcc cross-compiler. Given that I have the C++ code for program P and libraries L, J, and K that P uses….
How straightforward would Dehydra be to find all of the variables that don’t get used within any of the libraries or the program’s non-library code?

]]> By: Cesar http://blog.mozilla.com/tglek/2009/02/16/security-with-dehydra/comment-page-1/#comment-21449 Cesar Tue, 17 Feb 2009 03:37:14 +0000 http://blog.mozilla.com/tglek/?p=110#comment-21449 Neat. I played around with his examples and discovered that they no longer seem to work. lhs.unsigned seems to have been replaced by lhs.isUnsigned so I fear that there is a java programmer hidden in one of the Dehydra contributors. But anyways, it peaked my curiosity for me to go through the trouble of installing dehydra. I have a friend who works for a security consulting group, and I have no idea what they use for static analysis tools. I think we would both be sadden to hear if it involved grep. Neat. I played around with his examples and discovered that they no longer seem to work. lhs.unsigned seems to have been replaced by lhs.isUnsigned so I fear that there is a java programmer hidden in one of the Dehydra contributors.

But anyways, it peaked my curiosity for me to go through the trouble of installing dehydra. I have a friend who works for a security consulting group, and I have no idea what they use for static analysis tools. I think we would both be sadden to hear if it involved grep.

]]>