Detecting missing checks for identifying insufficient attack protections
Lingyun Situ, Liang Zou, Linzhang Wang, Yang Liu, Bing Mao, Xuandong Li · 2018
Missing check for untrusted input used in security-sensitive operations is one of the major causes of various serious vulnerabilities. Thus, efficiently detecting missing checks for realistic software is essential for identify insufficient attack protections. We propose a systematic static approach to detect missing checks in C/C++ programs. An automated and cross-platform tool named Vanguard was implemented on top of Clang/LLVM 3.6.0. And experimental results have shown its effectiveness and efficiency.