cppcheck-nvd-checker

Helper scripts to verify Cppcheck bug-hunting mode on NVD CVE datasets. See this thread on the forum for background.

checker.py

This script is used to download NVD CVE data and collect additional information about vulnerabilities through Github API.

You will need Github API token to run in. Go to settings and generate a new one.

Then run it:

GITHUB_TOKEN='fffffff' python3 checker.py --format=html > report.html

expr-printer.py

Used to generate an HTML report on symbolic expressions of an abstract interpretation engine.

Usage:

cppcheck main.cpp --bug-hunting --debug --debug-bug-hunting --verbose 2>&1 > data.txt
python3 expr-printer.py main.cpp data.txt > report.html