Research indexJournal article
Integer Overflow Detection with Delayed Runtime Test
Huang, Yu
16 Aug 2021
NobleIDark:/48914/w1/20260525/D67FCCDBDOI10.1145/3465481.3465771
Integer Overflow Detection with Delayed Runtime Test
Huang, Yu · 2021 · Subscription
NobleIDark:/48914/w1/20260525/D67FCCDBDOI10.1145/3465481.3465771
The full text is at the publisher
You can read the abstract here, or open it at the publisher.
Abstract
Detecting integer overflow vulnerabilities is critical for software security. Many techniques have been proposed to dynamically detect integer overflow vulnerabilities by instrumenting integer overflow tests into target programs. Their major drawback is that they can produce many false positives. In this paper, we propose an approach to eliminate the false positives stemming from incorrectly or not considering the sanitization code in target programs that is designed by developers to catch integer overflows.