RE: As-if Infinitely Ranged Integer Model

2009-07-25 Thread Robert Seacord
Joseph, Comments below. Then you are building on the runtime-constraint mechanism and rsize_t of TR 24731-1. TR 24731-1 is considered useless in the Linux world, and not implemented in the GNU C Library, and with good reason; see . I

As-if Infinitely Ranged Integer Model

2009-07-24 Thread Robert Seacord
The Secure Coding Initiative at CERT has published a new Technical Note CMU/SEI-2009-TN-023 entitled "As-if Infinitely Ranged Integer Model". Abstract: Integer overflow and wraparound are major causes of software vulnerabilities in the C and C++ programming languages. In this paper we present