Automatic Discovery and Patching of Buffer and Integer Overflow Errors
Name
MIT-CSAIL-TR-2015-018.pdf
Size
224.66 KB
Format
Adobe PDF
Checksum (MD5)
96f79affbae8dd5901cc77c0dd12089e
Download all files submitted through automated deposit
Author(s)
Sidiroglou-Douskos, Stelios
Lahtinen, Eric
Rinard, Martin
Advisor(s)
Martin Rinard
Date Issued
May 26, 2015
Series/Report no.
MIT-CSAIL-TR-2015-018
Abstract
We present Targeted Automatic Patching (TAP), an automatic buffer and integer overflow discovery and patching system. Starting with an application and a seed input that the application processes correctly, TAP dynamically analyzes the execution of the application to locate target memory allocation sites and statements that access dynamically or statically allocated blocks of memory. It then uses targeted error-discovery techniques to automatically generate inputs that trigger integer and/or buffer overflows at the target sites. When it discovers a buffer or integer overflow error, TAP automatically matches and applies patch templates to generate patches that eliminate the error. Our experimental results show that TAP successfully discovers and patches two buffer and six integer overflow errors in six real-world applications.
Persistent DSpace Link
