Every token type has a file that lists all the tokens for which to scan. The default token files delivered with the tool are:
To add a new token for which to scan:
For example, if IRAPI function irFPlay were found to have a problem, and needed to be flagged by scanit
, you would update the tokens_c file (IRAPI calls are found in C programs). The format of tokens_c files is a simple three column file that has the following format:
NAME:
token weight
where NAME is fixed text and token and weight are required variables.
Note:
When adding new tokens do not leave any blank lines at the bottom of the token_type file.