Good integer overflow papers?
John Wilander <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
Hello SecProg debaters!
I'm looking for a good paper on integer overflows. I would like to see
some code examples and some guidelines on how to remedy the problem.
Blexim's paper "Basic Integer Overflows" provides code examples but
quite a few simply don't work the way he explains due to implicit
type-casting in C. Michael Howard from Microsoft has also written about
integer overflows in "Reviewing Code for Integer Manipulation
Vulnerabilities". Apart from these papers, any suggestions?
Best regards, John Wilander
______________________________________
John Wilander, PhD student
Computer Science, Linkoping University
http://www.ida.liu.se/~johwi