The NASA Open Source Tool You Never Heard About (I like it)

[@RichardBejtlich]

00:07 I work in security, I literally LOLd when you said “undisputed buffer overflow champion like you.” 😂

[@DeanGvozdic]

Great video! What kind of switches are you using in that keyboard though? Sounds amazing.

[@Tariq10x]

Thanks bro. The switches are the stock switches that came with the rk royal kludge s98 keyboard, they call them "pale green switches". They are more clicky than the purple ones.

[@DeanGvozdic]

@@Tariq10x thank you!

[@udirt]

I worked with the cavium sdk for a few days now, some old build, it would be hilarious to run this tool against any sdk by some large vendor, marvell, broadcast, citrix etc. (It would always end in tears, if you had to fix it)

[@RichardBejtlich]

1:12 this is why I have a job 😂

[@rendivs]

Lmao 😂

[@divinefavour1289]

starfield?

[@b33lz3bubth]

undisputed buffer overflow champion like you! hahahahahahahhahahahahahahha nice one bro, i will use this.

[@WR3ND]

Nice keyboard.

[@Tariq10x]

Thx bro

[@P3PPING]

CTRL-L will save you seconds of your life by not having to type clear.

[@thehady1]

Is it like valgrind or something else

[@jackzugna5830]

Valgrind execute the code. "Cppcheck" is the static analyzer for C/C++.

No, it is more like cppcheck. It is static analysis, not runtime memory check like Valgrind.

[@NorthernChimp]

This should exist for other languages too.

[@Tariq10x]

Static code analysis tools exist also for other languages ✌️

[@kowaihana]

It does tho?? 😭😭

[@NorthernChimp]

@@kowaihana yes

[@vanodon2257]

0_o Windows XP has a quite a few and the 1st I tried still works in Win 11 no way 😂

[@cheeto4950]

especially if its a friday afternoon 😭😭😭

[@NGUmrra1n]

If it is marking the rest of the code as dead, how is it a "static" code analyser?

[@lucasew]

Static means that it doesn't run the code itself

[@Tariq10x]

Well it highlights that the section of the code will not be executed under any conditions. Same would happen if you would write an IF condition that would never under any conditions be met.

[@TaigiTWeseFormosanDiplomat]

oko

[@marcelguinhos9022]

VirtualBox instead of WSL2 or MinGW?

[@flipbit03]

And?

[@WR3ND]

No, WirtualBox.

[@paca3107]

sorry man I have to dislike this video, because I saw Windows logo. I use arch btw

[@Tariq10x]

Understandable Sir, have a nice day.

[@vickeythegamer7527]

@@Tariq10x same i have to dislike

[@CorvusCorps]

Bunch of elitist haterrrrsss. I run win11 with wsl2 and raspberry pi os with some arch on the side. Windows #1😅

[@Tariq10x]

My experience taught me to just use whatever is the best fit for the task at hand and don’t overcommit to any framework, language or os ✌️Me personally, I use all three, macos, ubuntu linux and windows.

[@papydoctor]

use Rust 🙂

[@divinefavour1289]

bro just use a debugger

[@EmiNNsoNify]

I think you are missing the point of tools like this one. They are commonly used as part of the CI/CD pipeline as a gatekeeper to catch possible bad code in an automated way. Because while you might be using the debugger a lot of people don't.

[@divinefavour1289]

@@EmiNNsoNify i guess but i still think everyone should use the debugger. that way everyone can be certain what their code is actually doing. automated tests like this will remain subject to the subjective valuations of the person who wrote the test. and if this person's values are wrong or produce terrible code, then everyone who abides by the test will then also produce terrible code

[@dennisestenson7820]

​​​@@divinefavour1289regardless of what you think about debugging, there are use cases where attaching a debugger is not possible.