Value-Range Analysis of C Programs

Towards Proving the Absence of Buffer Overflow Vulnerabilities

af Axel Simon

The book formally describes how program operations are mapped to operations on polyhedra and details how to limit the analysis to those p- tionsofstructuresandarraysthatarerelevantforveri?cation.Withrespectto operations on string bu?ers, we demonstrate how to analyse C strings whose length is determined by anul character within the string.