Transcription of Understanding Integer Overflow in C/C++
{{id}} {{{paragraph}}}
Appeared inProceedings of the 34th International Conference on Software Engineering (ICSE), Zurich, Switzerland, June Integer Overflow in C/C++ Will Dietz, Peng Li, John Regehr, and Vikram Adve Department of Computer ScienceUniversity of Illinois at School of ComputingUniversity of Integer overflow bugs in C and C++ programsare difficult to track down and may lead to fatal errors orexploitable vulnerabilities. Although a number of tools forfinding these bugs exist, the situation is complicated becausenot all overflows are bugs. Better tools need to be constructed but a thorough Understanding of the issues behind these errorsdoes not yet exist. We developed IOC, a dynamic checking toolfor Integer overflows, and used it to conduct the first detailedempirical study of the prevalence and patterns of occurrenceof Integer overflows in C and C++ code.
C and C++ implementation. nOf course, even well-defined semantics can lead to logic errors, for example if a developer na¨ıvely assumes that x+1 is larger than x. 2. Listing 1. Source for overflow.c referred to in the text 1 int foo (int x) {2 return ( x+1 ) > x; 3} 4 5 int main (void)
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}