Statically detecting likely buffer overflow vulnerabilities

摘要: Buffer overflow attacks may be today's single most important security threat. This paper presents a new approach to mitigating buffer vulnerabilities by detecting likely through an analysis of the program source code. Our exploits information provided in semantic comments and uses lightweight efficient static analyses. describes implementation our that extends LCLint annotation-assisted checking tool. tool is as fast compiler nearly easy use. We present experience using detect two security-sensitive programs.