Statically Detecting Buffer Overflow Vulnerabilities
Liu Jian · Microcomputer Development · 2004
Buffer overflow vulnerabilities may be today's singlemost important and most common security threat.In this paper,first analyzes the shortcomings of run-time defenses of buffer overflow attacks, and then presents an approach and a tool to statically detect buffer overflow vulnerabilities.By adding annotations to source code and using annotation-assisted static analysis,the approach can detect potential safety vulnerabilities in the programs before the software is deployed.