Automatic Discovery and Patching of Buffer and Integer Overflow Errors

摘要: We present Targeted Automatic Patching (TAP), an automatic buffer and integer overflow discovery patching system. Starting with application a seed input that the processes correctly, TAP dynamically analyzes execution of to locate target memory allocation sites statements access or statically allocated blocks memory. It then uses targeted errordiscovery techniques automatically generate inputs trigger and/or overflows at sites. When it discovers error, matches applies patch templates patches eliminate error. Our experimental results show successfully two six errors in real-world applications.