70
Voted
ESSOS
2009
Springer
15 years 21 days ago
2009
Springer
Abstract. To understand the effect of code complexity on static analysis, thirty-five format string vulnerabilities were studied. We analyzed two code samples for each vulnerabilit...
IEEEARES
2008
IEEE
15 years 3 months ago
2008
IEEE
This paper describes the design and implementation of a lightweight static security analyzer that exploits the compilation process of the gcc compiler. The tool is aimed at giving...