A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities.

摘要: We describe a new technique for finding potential buffer overrun vulnerabilities in security-critical C code. The key to success is use static analysis: we formulate detection of overruns as an integer range analysis problem. One major advantage that security bugs can be eliminated before code deployed. have implemented our design and used prototype find remotely-exploitable large, widely deployed software package. An earlier hand audit missed