基于整型变量一致化的整数溢出检测  

An Integer Overflow Detection Method Based on Integer Variable Unification

作　　者：徐国爱[1] 张淼[1] 陈爱国[1] 李忠献[2] 

机构地区：[1]北京邮电大学灾备技术国家工程实验室,北京100876 [2]天津市国瑞数码安全系统有限公司,天津300052

出　　处：《北京邮电大学学报》2008年第6期90-93,共4页Journal of Beijing University of Posts and Telecommunications

基　　金：国家“863计划”项目(2006AA01Z456);国家“973计划”项目(2007CB310704);高等学校博士学科点专项科研基金项目(20050013011)

摘　　要：在研究整数溢出产生原因的基础上,提出基于整型变量一致化处理且面向软件源代码整数溢出的检测方法.该方法将整数溢出检测问题抽象为1个多元不等式组求解的问题,用以解决上下文环境对整数溢出检测的影响.实例分析表明,该方法可有效解决源代码中整数溢出漏洞的检测问题.Through analyzing the principium of integer overflow, an integer overflow detection method on software source code is proposed which is based on integer variable unification. We presented the integer variable unification method and defined three unified actions which were used in three given cases. Then the detection process was described, it simplified integer overflow flaw into mathematic inequalities, and removed the influence of context to the objective variable. Finally, instances were provided to demonstrate the effectiveness and practicability of the presented method.

关 键 词：整数溢出 静态代码分析 控制流分析 信息安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]