Backwards-compatible array bounds checking for C with very low overhead

Proceedings - International Conference on Software Engineering

Volumn 2006, Issue , 2006, Pages 162-171

  Dhurjati, Dinakar ^a   Adve, Vikram ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Array bounds checking; Automatic pool allocation; Compilers; Programming languages; Region management

Indexed keywords

AUTOMATION; BENCHMARKING; PROBLEM SOLVING; PROGRAM COMPILERS; SET THEORY;

ARRAY BOUNDS CHECKING; AUTOMATIC POOL ALLOCATION; REGION MANAGEMENT; TECHNIQUES COLLECTION;

C (PROGRAMMING LANGUAGE);

EID: 34247170052     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1134285.1134309     Document Type: Conference Paper

References (23)

1. T. M. Austin, S. E. Breach, and G. S. Sohi. Efficient detection of all pointer and array access errors. In ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), June 1994.
2. R. Bodik, R. Gupta, and V. Sarkar. ABCD: eliminating array bounds checks on demand. In Proc. ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), 2000.
3. M. C. Carlisle. Olden: parallelizing programs with dynamic data structures on distributed-memory machines. PhD thesis, 1996.
4. D. Dhurjati and V. Adve. Detecting all dangling pointer uses in production servers. In International Conference on Dependable Systems and Networks (DSN), June 2006.
5. D. Dhurjati, S. Kowshik, and V. Adve. SAFECode: Enforcing alias analysis for weakly typed languages. In ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), June 2006.
6. D. Dhurjati, S. Kowshik, V. Adve, and C. Lattner. Memory safety without garbage collection for embedded applications. ACM Transactions on Embedded Computing Systems, Feb. 2005.
7. N. Dor, M. Rodeh, and M. Sagiv. Cssv: Towards a realistic tool for statically detecting all buffer overflows in c. In SIGPLAN Conference on Programming Language Design and Implementation, Sandiego, June 2003.
8. V. Ganapathy, S. Jha, D. Chandler, D. Melski, and D. Vitek. Buffer overrun detection using linear programming and static analysis. In Proceedings of the 10th ACM conference on Computer and communications security, New York, NY, USA, 2003.
9. M. Hicks, G. Morrisett, D. Grossman, and T. Jim. Experience with safe manual memory-management in cyclone. In Proc. of the 4th international symposium on Memory management (ISMM), 2004.
10. R. W. M. Jones and P. H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in c programs. In Automated and Algorithmic Debugging, pages 13-26, 1997.
11. S. C. Kendall. Bcc: Runtime checking for c programs. In In Proceedings of the USENIX, 1983.
12. C. Lattner and V. Adve. LLVM: A Compilation Framework for Lifelong Program Analysis and Transformation. In CGO, San Jose, Mar 2004.
13. C. Lattner and V. Adve. Automatic pool allocation: Improving performance by controlling data structure layout in the heap. In Proc. ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), Chicago, IL, Jun 2005.
14. A. Loginov, S. H. Yong, S. Horwitz, and T. Reps. Debugging via run-time type checking. Lecture Notes in Computer Science, 2001.
15. G. C. Necula, J. Condit, M. Harren, S. McPeak, and W. Weimer. Ccured: type-safe retrofitting of legacy software. ACM Trans. Program. Lang. Syst., 27(3):477-526, 2005.
16. H. Patil and C. Fischer. Low-cost, concurrent checking of pointer and array accesses in c programs. Software-Practice and Experience, 27(1):87-110, 1997.
17. O. Ruwase and M. Lam. A practical dynamic buffer overflow detector. In In Proceedings of the Network and Distributed System Security (NDSS) Symposium, pages 159-169, Feb. 2004.
18. J. L. Steffen. Adding run-time checking to the portable c compiler. In Software: Practice and Experience, 1992.
19. Y. Xie, A. Chou, and D. Engler. Archer: using symbolic, path-sensitive analysis to detect memory access errors. SIGSOFT Softw. Eng. Notes, 28(5):327-336, 2003.
20. W. Xu, D. C. DuVarney, and R. Sekar. An efficient and backwards-compatible transformation to ensure memory safety of c programs. In Proc. 12th ACM SIGSOFT Symposium on Foundations of Software Engineering, pages 117-126, 2004.
21. S. H. Yong and S. Horwitz. Protecting c programs from attacks via invalid pointer dereferences. In Foundations of Software Engineering, 2003.
22. M. Zhivich, T. Leek, and R. Lippmann. Dynamic buffer overflow detection. In BUGS: Workshop on the Evaluation of Software Defect Detection Tools, 2005.
23. M. Zitser, R. Lippmann, and T. Leek. Testing static analysis tools using exploitable buffer overflows from open source code. In Proceedings of the 12th ACM SIGSOFT symposium on Foundations of software engineering, 2004.