Hacker News Reader

More on the vulnerability from cryptographer Matthew Green:

I am curious about which static code analysis tools pick up this problem. Could it have been found automatically by Coverity, for example?

We tested most of the major ones at work on the faulty code, and only PC-Lint caught the issue.

Wow -- that's scary.