Fail-safe ANSI-C compiler: An approach to making C programs secure progress report

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2609, Issue , 2003, Pages 133-153

  Oiwa, Yutaka ^a   Sekiguchi, Tatsurou ^a,b   Sumii, Eijiro ^a   Yonezawa, Akinori ^a  

^a UNIVERSITY OF TOKYO   (Japan)

^b JAPAN SCIENCE AND TECHNOLOGY AGENCY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL LINGUISTICS; INTEGER PROGRAMMING; PROGRAM COMPILERS;

BUFFER OVERFLOWS; DANGLING POINTERS; DYNAMIC TYPE; ENTIRE SYSTEM; INTERNET SERVERS; PROGRESS REPORT; RUN-TIME CHECKS; SOCIAL PROBLEMS;

C (PROGRAMMING LANGUAGE);

EID: 35248827742     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-36532-x_9     Document Type: Article

References (16)

1. Todd M. Austin, Scott E. Breach, and Gurindar S. Sohi. Efficient detection of all pointer and array access errors. In Proc. '94 Conference on Programming Language Design and Implementation (PLDI), pages 290-301, 1994.
2. Rastislav Bodik, Rajiv Gupta, and Vivek Sarkar. ABCD: Eliminating Array Bounds Checks on Demand. In Proceedings of the SIGPLAN '00 Conference on Program Language Design and Implementation, June 2000.
3. Crispan Cowan, Calton Pu, Dave Maier, Jonathan Walpole, Peat Bakke, Steve Beattie, Aaron Grier, Perry Wagle, Qian Zhang, and Heather Hinton. StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks. In Proc. 7th USENIX Security Conference, pages 63-78, San Antonio, Texas, January 1998.
4. Dan Grossman, Greg Morrisett, Trevor Jim, Michael Hicks, Yanling Wang, and James Cheney. Region-based memory management in Cyclone. In Proc. ACM Conference on Programming Language Design and Implementation (PLDI), pages 282-293, June 2002.
5. Reed Hastings and Bob Joyce. Purify: Fast detection of memory leaks and access errors. In Proc. 1992 Winter USENIX Conference, pages 125-136, 1992.
6. Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney, and Yanling Wang. Cyclone: A safe dialect of C. In USENIX Annual Technical Conference, June 2002.
7. Richard W. M. Jones and Paul H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in C programs. In Automated and Algorithmic Debugging, pages 13-26, 1997.
8. Stephen Kaufer, Russell Lopez, and Sasha Pratap. Saber-C: an interpreter-based programming environment for the C language. In Proc. 1998 Summer USENIX Conference, pages 161-171, 1988.
9. Jens Knoop, Oliver Rüthing, and Bernhard Steffen. Lazy Code Motion. In Proceedings of the 5th ACM SIGPLAN Conference on Programming Language Design and Implementation, pages 224-234, June 1992.
10. Alexey Loginov, Suan Hsi Yong, Susan Horwitz, and Thomas Reps. Debugging via run-time type checking. Lecture Notes in Computer Science, 2029:217-, 2001.
11. George Necula, Scott McPeak, and Westley Weimer. CCured: Type-safe retrofitting of legacy code. In Proc. The 29th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL2002), pages 128-139, January 2002.
12. Yutaka Oiwa, Eijiro Sumii, and Akinori Yonezawa. Implementing a fail-safe ANSI-C compiler. In JSSST 2001, Hakodate, Japan, 18 September 2001. Japan Society for Software Science and Technology. In Japanese.
13. Yutaka Oiwa, Eijiro Sumii, and Akinori Yonezawa. Implementing a fail-safe ANSI-C compiler. Computer Software, 19(3):39-44, May 2002. In Japanese.
14. Harish Patil and Charles Fischer. Low-cost, concurrent checking of pointer and array accesses in C programs. Software - Practice and Experience, 27(1):87-110, January 1997.
15. Radu Rugina and Martin Rinard. Symbolic bounds analysis of pointers, array indices, and accessed memory regions. In Proc. '00 Conference on Programming Language Design and Implementation (PLDI), pages 182-195, 2000.
16. David Wagner, Jeffrey S. Foster, Eric A. Brewer, and Alexander Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Network and Distributed System Security Symposium, February 2000.