Code Analysis of Modeling Execution Path as Process
Fan Jiang · Jisuanji gongcheng · 2010
Aiming at the problem that the resource consumption of symbolic execution is too large,this paper proposes an intra-procedural analysis method which is named modeling execution path as process,and combines using the method of modeling objects which is named lazy initialization.A tool prototype which can detect the vulnerability of C code is implemented,and analyzes the Intermediate Rresent(IR) of Phoenix as the direct object.Some known vulnerabilities of Openssl and Apache are verified,and a DOS vulnerability of the version 1.11.4 of wget is detected.