From: Dr. Stephen Henson <steve@openssl.org>
Date: Mon, 11 Nov 2013 14:40:07 +0000 (+0000)
Subject: Update FAQ
X-Git-Tag: master-post-reformat~1083
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=5fad2c93bc161ab387de5810d9fa15b42893f702;p=oweals%2Fopenssl.git

Update FAQ
---

diff --git a/FAQ b/FAQ
index e1b04a5288..9543e4ab07 100644
--- a/FAQ
+++ b/FAQ
@@ -738,6 +738,7 @@ never make sense, and tend to emerge when you least expect them. In order
 to identify one, drop optimization level, e.g. by editing CFLAG line in
 top-level Makefile, recompile and re-run the test.
 
+
 * I think I've found a bug, what should I do?
 
 If you are a new user then it is quite likely you haven't found a bug and
@@ -746,6 +747,11 @@ documentation and the mailing lists for similar queries. If you are still
 unsure whether it is a bug or not submit a query to the openssl-users mailing
 list.
 
+If you think you have found a bug based on the output of static analysis tools
+then please manually check the issue is genuine. Such tools can produce a
+LOT of false positives.
+
+
 * I'm SURE I've found a bug, how do I report it?
 
 Bug reports with no security implications should be sent to the request