A Study Based on Static Detection for Buffer Overflow Flaw
Zhao Xi-wu · Computer Programming Skills & Maintenance · 2013
Buffer overflow flaw is a kind of harm and common software security flaws.Static analysis method which doesn't need to run the source code can extract software static information and detect potential security flaws in software.Because the static detector Splint has limitations in detecting buffer overflow attacking flaws,this paper improves the tool in functionalities of detection and dangerous functions detected.At last,the improved Splint was used to detect several common software packages which are correlative to web application.The results showed the improved Splint could enhance the efficiency of detection to buffer overflow flaws.