News for hackers. Stuff that matters.

A comment on Was the iOS SSL Flaw Deliberate?. Parent comment

Re:Was the iOS SSL Flaw Deliberate? by tptacek on Thursday February 27, 2014 @01:31PM (#7313951)
Unit test coverage isn't static analysis. It's practically the opposite of static analysis.
[ Parent | on HN ]
Re:Was the iOS SSL Flaw Deliberate? by pessimizer on Thursday February 27, 2014 @01:58PM (#7314143)
I'm not talking about unit test coverage:) I read the comment too quickly.

I'm talking about tools like http://oclint.org/ and http://clang-analyzer.llvm.org/

If they work anything like similar tools in other languages, they would have found this bug trivially.

[ Parent | on HN ]
Re:Was the iOS SSL Flaw Deliberate? by tptacek on Thursday February 27, 2014 @02:15PM (#7314256)
Yes, along with hundreds of other issues that would have had no security impact.
[ Parent | on HN ]