Buffer overflow detection for C programs is hard to learn
Yang Zhao, Xingzhong Du, Paddy Krishnan, Cristina Cifuentes · 2018
Machine learning has been used to detect bugs such as buffer overflow [6, 8]. Models get trained to report bugs at the function or file level, and reviewers of the results have to eyeball the code to determine whether there is a bug in that function or file, or not. Contrast this to static code analysers which report bugs at the statement level along with traces [3, 7], easing the effort required to review the reports.