DMCA
ARCHER: Using Symbolic, Path-sensitive Analysis to Detect Memory Access Errors (2003)
Cached
Download Links
- [www.stanford.edu]
- [www.cs.virginia.edu]
- CiteULike
- DBLP
Other Repositories/Bibliography
| Venue: | SIGSOFT Softw. Eng. Notes |
| Citations: | 82 - 0 self |
BibTeX
@INPROCEEDINGS{Xie03archer:using,
author = {Yichen Xie and Andy Chou and Dawson Engler},
title = {ARCHER: Using Symbolic, Path-sensitive Analysis to Detect Memory Access Errors},
booktitle = {SIGSOFT Softw. Eng. Notes},
year = {2003},
pages = {327--336},
publisher = {ACM Press}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Memory corruption errors lead to non-deterministic, elusive crashes. This paper describes ARCHER (ARray CHeckER) a static, e#ective memory access checker. ARCHER uses path-sensitive, interprocedural symbolic analysis to bound the values of both variables and memory sizes. It evaluates known values using a constraint solver at every array access, pointer dereference, or call to a function that expects a size parameter. Accesses that violate constraints are flagged as errors. Those that are exploitable by malicious attackers are marked as security holes.
Keyphrases
path-sensitive analysis using symbolic detect memory access error interprocedural symbolic analysis array access violate constraint array checker size parameter malicious attacker ective memory access checker memory size security hole constraint solver pointer dereference memory corruption error elusive crash
