Finding error handling bugs in OpenSSL using Coccinelle

EDCC-8 - Proceedings of the 8th European Dependable Computing Conference

Volumn , Issue , 2010, Pages 191-196

  Lawall, Julia ^a   Laurie, Ben ^b   Hansen, René Rydhof ^c   Palix, Nicolas ^a   Muller, Gilles ^d  

^a UNIVERSITY OF COPENHAGEN   (Denmark)

^b Google Inc   (Japan)

^c AALBORG UNIVERSITY   (Denmark)

^d INRIA   (France)

Author keywords

Bug finding; Coccinelle; OpenSSL

Indexed keywords

BUG FINDING; ERROR HANDLING; LINUX KERNEL; MALICIOUS ATTACK; OPEN SSL; SECURE NETWORKS; TRANSFORMATION ENGINE; USER-LEVEL CODES;

COMPUTER OPERATING SYSTEMS;

EID: 77954342030     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EDCC.2010.31     Document Type: Conference Paper

References (8)

1. J. L. Lawall, J. Brunel, R. R. Hansen, H. Stuart, G. Muller, and N. Palix, "WYSIWIB: A declarative approach to finding protocols and bugs in Linux code," in The 39th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, (DSN 2009), Estoril, Portugal, Jun. 2009, pp. 43-52.
2. Y. Padioleau, J. Lawall, R. R. Hansen, and G. Muller, "Documenting and automating collateral evolutions in Linux device drivers," in EuroSys 2008, Glasgow, Scotland, Mar. 2008, pp. 247-260.
3. S. Rievers, "Finding bugs in open source software using coccinelle," Aug. 2009, bachelor's project, DIKU, University of Copenhagen.
4. N. Palix, J. Lawall, and G. Muller, "Tracking code patterns over multiple software versions with Herodotos," in Proc. of the ACM International Conference on Aspect-Oriented Software Development, AOSD'10, Rennes and Saint Malo, France, Mar. 2010, to appear.
5. D. R. Engler, D. Y. Chen, A. Chou, and B. Chelf, "Bugs as deviant behavior: A general approach to inferring errors in systems code," in Proceedings of the 18th ACM Symposium on Operating System Principles, Banff, Canada, Oct. 2001, pp. 57-72. [Online]. Available: http://citeseer.nj.nec.com/ 458580.html.
6. Z. Li and Y. Zhou, "PR-Miner: automatically extracting implicit programming rules and detecting violations in large software code," in Proceedings of the 10th European Software Engineering Conference held jointly with 13th ACM SIGSOFT International Symposium on Foundations of Software Engineering, Lisbon, Portugal, Sep. 2005, pp. 306-315.
7. M. K. Ramanathan, A. Grama, and S. Jagannathan, "Static specification inference using predicate mining," in Proceedings of the ACM SIGPLAN 2007 Conference on Programming Language Design and Implementation, San Diego, CA, USA, Jun. 2007, pp. 123-134.
8. I. Dillig, T. Dillig, and A. Aiken, "Static error detection using semantic inconsistency inference," in Proceedings of the 2007 ACM SIGPLAN conference on Programming Language Design and Implementation, San Diego, CA, Jun. 2007, pp. 435-445.