flawfinder
flawfinder copied to clipboard
flawfinder mis-identifies symbols named "system" as CWE-78
E.g. declaring a C++ namespace called system
raises this warning:
sdk/command.h:415: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.