On Wed, Aug 31, 2005 at 10:01:21PM +0200, Javier Fernández-Sanguino Peña wrote:
> Having that information crossreferenced would be a plus and being able to
> find files that are _almost_ close duplicates would be even better and would
> provide a way to find when a given vulnerability, patched in some program
> source A, is present in program B since it has reused some files from A.
> This is _very_ common in the OSS world.
The Unix Heritage Society used to have something similar (currently broken):
o http://minnie.tuhs.org/UnixTree/V7/usr/src/cmd/cal.c.html
There's also ESR's comparator:
o http://www.catb.org/~esr/comparator/
They could possibly serve as inspiration for someone who wants to work on
this.
// Ulf
|