ARCHER: Using Symbolic, Path-sensitive Analysis to Detect Memory Access Errors (2003)
Cached
Download Links
- [www.stanford.edu]
- [www.cs.virginia.edu]
- CiteULike
- DBLP
Other Repositories/Bibliography
| Venue: | SIGSOFT Softw. Eng. Notes |
| Citations: | 64 - 0 self |
BibTeX
@INPROCEEDINGS{Xie03archer:using,
author = {Yichen Xie and Andy Chou and Dawson Engler},
title = {ARCHER: Using Symbolic, Path-sensitive Analysis to Detect Memory Access Errors},
booktitle = {SIGSOFT Softw. Eng. Notes},
year = {2003},
pages = {327--336},
publisher = {ACM Press}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Memory corruption errors lead to non-deterministic, elusive crashes. This paper describes ARCHER (ARray CHeckER) a static, e#ective memory access checker. ARCHER uses path-sensitive, interprocedural symbolic analysis to bound the values of both variables and memory sizes. It evaluates known values using a constraint solver at every array access, pointer dereference, or call to a function that expects a size parameter. Accesses that violate constraints are flagged as errors. Those that are exploitable by malicious attackers are marked as security holes.
