关键词: 整数溢出, 静态代码分析, 控制流分析, 信息安全

Abstract:

Through analyzing the principium of integer overflow, an integer overflow detection method on software source code is proposed which is based on integer variable unification. We presented the integer variable unification method and defined three unified actions which were used in three given cases. Then the detection process was described, it simplified integer overflow flaw into mathematic inequalities, and removed the influence of context to the objective variable. Finally, instances were provided to demonstrate the effectiveness and practicability of the presented method.

Key words: integer overflow, static analysis, control flow analysis, information security