Transcription of Understanding Integer Overflow in C/C++
{{id}} {{{paragraph}}}
Appeared inProceedings of the 34th International Conference on Software Engineering (ICSE), Zurich, Switzerland, June Integer Overflow in C/C++ Will Dietz, Peng Li, John Regehr, and Vikram Adve Department of Computer ScienceUniversity of Illinois at School of ComputingUniversity of Integer overflow bugs in C and C++ programsare difficult to track down and may lead to fatal errors orexploitable vulnerabilities. Although a number of tools forfinding these bugs exist, the situation is complicated becausenot all overflows are bugs. Better tools need to be constructed but a thorough Understanding of the issues behind these errorsdoes not yet exist. We developed IOC, a dynamic checking toolfor Integer overflows, and used it to conduct the first detailedempirical study of the prevalence and patterns of occurrenceof Integer overflows in C and C++ code.
checking rules from the ISO language standards. Rather, tools will have to use highly sophisticated techniques and/or rely on manual intervention (e.g., annotations) to distinguish intentional and unintentional overflows. II. OVERFLOW IN C AND C++ Mathematically, n-bit two’s complement arithmetic is congruent, modulo 2n, to n-bit unsigned ...
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}