{"id":102842,"date":"2022-01-02T15:36:38","date_gmt":"2022-01-02T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d1%83%d1%82%d0%b8%d0%bb%d0%b8%d1%82%d1%8b-gnu-cflow-1-7"},"modified":"2022-01-02T15:36:38","modified_gmt":"2022-01-02T13:36:38","slug":"%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d1%83%d1%82%d0%b8%d0%bb%d0%b8%d1%82%d1%8b-gnu-cflow-1-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-%d1%83%d1%82%d0%b8%d0%bb%d0%b8%d1%82%d1%8b-gnu-cflow-1-7","title":{"rendered":"Release of GNU cflow 1.7 utility","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After three years of development, the GNU cflow 1.7 utility has been released, designed to create a clear graph of function calls in C programs, which can be used to simplify the understanding of application logic. The graph is constructed solely based on the analysis of source code, without the need to execute the program. It supports the generation of both direct and reverse execution flow graphs, as well as generating lists of cross-references for code files. <\/p>\n
The release is noteworthy for the implementation of support for the «dot» output format (‘—format=dot’) for generating results in the DOT language for subsequent visualization in the Graphviz package. The ability to specify multiple starting functions through duplicating the ‘—main’ options has been added, and a separate graph will be generated for each of these functions. Additionally, the «—target=FUNCTION» option has been introduced, which allows limiting the resulting graph to only the branch that includes specific functions (the «—target» option can be specified multiple times). In cflow-mode, new commands have been added for navigating through the graph: «c» — jump to the calling function, «n» — jump to the next function at this level of nesting, and «p» — jump to the previous function at the same level of nesting. <\/p>\n
The new version also addresses two vulnerabilities that were identified as early as 2019, which cause memory corruption when cflow processes specially formatted source texts. The first vulnerability (CVE-2019-16165) is caused by accessing memory after it has been freed (use-after-free) in the parser code (function reference in parser.c). The second vulnerability (CVE-2019-16166) is related to a buffer overflow in the nexttoken() function. According to the developers, these issues do not pose a security threat as they are limited to the utility crashing. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"