Using augmented assignment statements

[elfring]

I have noticed that source code like “var = var + X” was specified at a few places so far.
I suggest to use augmented assignment statements instead.

[david-a-wheeler]

I will take patches, but I'll note that the amount of performance gained really isn't worth the trouble. What is more important is improving its ability to detect real problems or to ignore false positives.

[elfring]

• Would you like to apply another regular expression for the proposed software transformation?
• I find that source code analysis approaches from this Python script point fundamental open issues out in comparison to other known software technology.

[david-a-wheeler]

I'm not sure what you mean. If you'd like to propose a change to the software, then create a pull request with the proposed change.

[elfring]

• One transformation would affect a bit of software fine-tuning.
• Additional development considerations can become relevant for the published information “Nevertheless, flawfinder is fundamentally a naive program; it doesn’t even know about the data types of function parameters, and it certainly doesn’t do control flow or data flow analysis …”.
  Something was achieved based on the application of regular expressions so far.

[david-a-wheeler]

Pull request #4 changes flawfinder to use augmented assignment statements.

[david-a-wheeler]

The changes were merged, I'm closing this matching issue.