[ajug-members] Delphi Pascal code analysis

[Gordon.Colburn at AmericanSystems.com]

Dean,

 

I agree that a manual inspection is needed for the reason you mention.
If I can find a good static analyzer, I would like to use it in addition
to the manual inspection.

 

Regards,

Gordon

 



Gordon Colburn
Software Architect

AMERICAN SYSTEMS
2520 Northwinds Parkway, Suite 300
Alpharetta, GA 30004
www.AmericanSystems.com

phone: (678) 566-4829
mobile: (404) 936-6626
fax: (678) 566-4861
Gordon.Colburn at AmericanSystems.com

"Contractor of the Year - 5th Annual Greater Washington Government Contractor Awards"

________________________________

From: Dean H. Saxe [mailto:dean at fullfrontalnerdity.com] 
Sent: Wednesday, January 23, 2008 10:31 AM
To: ajug-members at ajug.org
Subject: Re: [ajug-members] Delphi Pascal code analysis

 

I'm not aware of any static analysis tools that handle Delphi Pascal.  I
think you may have to approach this via manual techniques, which is part
and parcel of this kind of review anyway since static analysis won't
identify flaws (architectural issues) only bugs (i.e. developer made a
poor choice of APIs to use).

 

-dhs

 

 

Dean H. Saxe, CISSP, CEH

dean at fullfrontalnerdity.com

"Free speech exercised both individually and through a free press, is a
necessity in any country where people are themselves free." 

    -- Theodore Roosevelt, 1918

 

 

On Jan 23, 2008, at 10:07 AM, <Gordon.Colburn at AmericanSystems.com>
<Gordon.Colburn at AmericanSystems.com> wrote:





Sorry in advanced about the slightly off-topic post.

 

I am starting a project that will involve reviewing several bodies of
Delphi Pascal source code, to assess code quality, security and
architectural soundness. If anyone has suggestions regarding static
source code analysis tools, reverse engineering tools or techniques for
manual code inspections of Delphi Pascal source code, please contact me
at:

 

gordon.colburn at AmericanSystems.com

 

or via this forum.

 

Thanks,

Gordon

 

<logo.gif> 

Gordon Colburn

Software Architect


2520 Northwinds Parkway, Suite 300
Alpharetta, GA 30004
www.AmericanSystems.com <http://www.americansystems.com/> 

phone: (678) 566-4829
mobile: (404) 936-6626
fax: (678) 566-4861
Gordon.Colburn at AmericanSystems.com


"Contractor of the Year - 5th Annual Greater Washington Government
Contractor Awards"

LEGAL DISCLAIMER: The information in this email is confidential and may
be legally privileged. It is intended solely for the addressee. Access
to this email by anyone else is unauthorized. If you are not the
intended recipient, any disclosure, copying, distribution or any action
taken or omitted to be taken in reliance on it, is prohibited and may be
unlawful.

 

_______________________________________________
ajug-members mailing list
ajug-members at ajug.org
http://www.ajug.org/mailman/listinfo/ajug-members
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.ajug.org/pipermail/ajug-members/attachments/20080124/b480ff17/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logo.gif
Type: image/gif
Size: 3424 bytes
Desc: not available
Url : http://www.ajug.org/pipermail/ajug-members/attachments/20080124/b480ff17/attachment.gif