New answers tagged vulnerabilities
To begin with, this is really a bad example, since using gets is always a security vulnerability. There is literally no way of using it safely, and it's implemented today merely in order not to break huge amounts of existing code. But in general, yes, there are always things that a static analyzer will not find (because of the halting problem), and some of ...
Top 50 recent answers are included