Exterminator: Automatically correcting memory errors with high probability

Communications of the ACM

Volumn 51, Issue 12, 2008, Pages 87-95

  Novark, Gene ^a   Berger, Emery D ^a   Zorn, Benjamin G ^b  

^a Biologically Inspired Neural and Dynamical Systems Laboratory   (United States)

^b MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUFFER OVERFLOWS; DANGLING POINTERS; EMPIRICAL RESULTS; HIGH PRECISION; HIGH PROBABILITIES; MEMORY ERRORS; MEMORY STATE; MULTIPLE USERS; RUN-TIME; SECURITY VULNERABILITIES; SOURCE CODES;

COMPUTER SOFTWARE;

ERRORS;

EID: 59449083597     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1409360.1409382     Document Type: Article

References (17)

1. Austin, T.M., Breach, S.E., and Sohi, G.S. Efficient detection of all pointer and array access errors. In Proceedings of the 1994 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 1994, 290-301.
2. Avots, D., Dalton, M., Livshits, V.B., and Lam, M.S. Improving software security with a C pointer analysis. In Proceedings of the 27th International Conference on Software Engineering, ACM Press, May 2005, 332-341.
3. Berger, E.D. and Zorn, B.G. DieHard: Probabilistic memory safety for unsafe languages. In Proceedings of the 2006 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 2006, 158-168.
4. Berger, E.D. and Zorn, B.G. Efficient probabilistic memory safety. Technical Report UMCS TR-2007-17, Department of Computer Science, University of Massachusetts Amherst, Mar. 2007.
5. Berger, E.D. Zorn, B.G., and McKinley, K.S. Composing high-performance memory allocators. In Proceedings of the 2001 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 2001, 114-124.
6. Dhurjati, D., Kowshik, S., and Adve, V. SAF ECode: Enforcing alias analysis for weakly typed languages. In Proceedings of the 2006 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 2006, 144-157.
7. Hastings, R. and Joyce, B. Purify: Fast detection of memory leaks and access errors. In Proceedings of the Winter 1992 USENIX Conference, USENIX, Jan. 1992, 125-138.
8. Lea, D. A memory allocator. http://gee.cs.oswego.edu/dl/html/malloc.html, 1997.
9. Necula, G.C., McPeak, S., and Weimer, W. CCured: Type-safe retrofitting of legacy code. In Proceedings of the 29th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, ACM Press, Jan. 2002, 128-139.
10. Nethercote, N. and Seward, J. Valgrind: A framework for heavyweight dynamic binary instrumentation. In Proceedings of 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 2007, 89-100.
11. Novark, G., Berger, E.D., and Zorn, B.G. Exterminator: Automatically correcting memory errors with high probability. In Proceedings of the 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation, ACM Press, June 2007, 1-11.
12. Qin, F., Tucek, J., Sundaresan, J., and Zhou, Y. Rx: Treating bugs as allergies - a safe method to survive softwar failures. In Proceedings of the Twentieth Symposium on Operating Systems Principles, vol. XX of Operating Systems Review, ACM Press, Oct. 2005, 235-248.
13. Rinard, M., Cadar, C., Dumitran, D., Roy, D.M., and Leu, T. A dynamic technique for eliminating buffer overflow vulnerabilities (and other memory errors). In Proceedings of the 20th Annual Computer Security Applications Conference, IEEE Computer Society, Dec. 2004, 82-90.
14. Rinard, M., Cadar, C., Dumitran, D., Roy, D.M., Leu, T., and Beebee, W.S. Jr. Enhancing server availability and security through failure-oblivious computing. In Sixth Symposium on Operating Systems Design and Implementation, USENIX, Dec. 2004, 303-316.
15. Röjemo, N. and Runciman, C. Lag, drag, void, and use: heap profiling and space-efficient compilation revisited. In Proceedings of First International Conference on Functional Programming, ACM Press, May 1996, 34-41.
16. Standard Performance Evaluation Corporation. SPEC2000. http://www.spec.org.
17. Symantec. Internet security threat report. http://www.symantec.com/ enterprise/threatreport/index.jsp, Sept. 2006.