Matches in SemOpenAlex for { <https://semopenalex.org/work/W4321353680> ?p ?o ?g. }
Showing items 1 to 79 of
79
with 100 items per page.
- W4321353680 endingPage "407" @default.
- W4321353680 startingPage "391" @default.
- W4321353680 abstract "Missing-check of erroneous execution states may cause critical security problems, such as null pointer dereference bugs or logic errors, which could even crash the systems. It’s still a challenge to decide automatically whether an erroneous state should be validated or not because of the difficulty in understanding API semantics. Cross-checking is a sound method to resolve the problem. However, recent cross-checking studies suffer from poor accuracy due to inaccurate data-flow analysis, leading to the imprecise analysis of many error states and false positives. In this paper, we present ERSAnalyzer (Erroneous Return Status Analyzer), a new static analysis method to improve existing tools to completely detect inter-procedural missing-check bugs of return values in the Linux kernel. At first, our approach identifies the functions which may generate error return status. After that, we propose a new method to find out the pointer parameter variables carrying error semantics except for the return values. Then a complete missing-check analysis on these critical variables is performed to confirm if they are validated before or after functions return. By utilizing cross-checking, ERSAnalyzer achieves higher precision of 71.3% in deciding whether a critical variable is checked. ERSAnalyzer reports 335 cases; 239 of those are potential bugs, 25 are manually proved to be actual missing-check bugs. Limited by the understanding of the code logic and some bugs that have been fixed in the latest version. We finally submitted 12 new bugs to the Linux Kernel, and six of our patches have been accepted up to now. The results show the effectiveness of ERSAnalyzer." @default.
- W4321353680 created "2023-02-20" @default.
- W4321353680 creator A5017417068 @default.
- W4321353680 creator A5019278589 @default.
- W4321353680 creator A5039667666 @default.
- W4321353680 creator A5052663273 @default.
- W4321353680 creator A5074339191 @default.
- W4321353680 date "2023-01-01" @default.
- W4321353680 modified "2023-10-07" @default.
- W4321353680 title "Detecting API Missing-Check Bugs Through Complete Cross Checking of Erroneous Returns" @default.
- W4321353680 cites W1657461476 @default.
- W4321353680 cites W2078186835 @default.
- W4321353680 cites W2109612250 @default.
- W4321353680 cites W2150874411 @default.
- W4321353680 cites W2155061608 @default.
- W4321353680 cites W2509822438 @default.
- W4321353680 cites W2741422284 @default.
- W4321353680 cites W2891748016 @default.
- W4321353680 cites W2967719799 @default.
- W4321353680 cites W2987375469 @default.
- W4321353680 cites W3096174798 @default.
- W4321353680 cites W4252535654 @default.
- W4321353680 cites W4296596384 @default.
- W4321353680 doi "https://doi.org/10.1007/978-3-031-26553-2_21" @default.
- W4321353680 hasPublicationYear "2023" @default.
- W4321353680 type Work @default.
- W4321353680 citedByCount "0" @default.
- W4321353680 crossrefType "book-chapter" @default.
- W4321353680 hasAuthorship W4321353680A5017417068 @default.
- W4321353680 hasAuthorship W4321353680A5019278589 @default.
- W4321353680 hasAuthorship W4321353680A5039667666 @default.
- W4321353680 hasAuthorship W4321353680A5052663273 @default.
- W4321353680 hasAuthorship W4321353680A5074339191 @default.
- W4321353680 hasConcept C1009929 @default.
- W4321353680 hasConcept C111919701 @default.
- W4321353680 hasConcept C119857082 @default.
- W4321353680 hasConcept C124101348 @default.
- W4321353680 hasConcept C150202949 @default.
- W4321353680 hasConcept C154945302 @default.
- W4321353680 hasConcept C168065819 @default.
- W4321353680 hasConcept C199360897 @default.
- W4321353680 hasConcept C2777904410 @default.
- W4321353680 hasConcept C41008148 @default.
- W4321353680 hasConcept C553261973 @default.
- W4321353680 hasConcept C64869954 @default.
- W4321353680 hasConcept C9357733 @default.
- W4321353680 hasConcept C97686452 @default.
- W4321353680 hasConceptScore W4321353680C1009929 @default.
- W4321353680 hasConceptScore W4321353680C111919701 @default.
- W4321353680 hasConceptScore W4321353680C119857082 @default.
- W4321353680 hasConceptScore W4321353680C124101348 @default.
- W4321353680 hasConceptScore W4321353680C150202949 @default.
- W4321353680 hasConceptScore W4321353680C154945302 @default.
- W4321353680 hasConceptScore W4321353680C168065819 @default.
- W4321353680 hasConceptScore W4321353680C199360897 @default.
- W4321353680 hasConceptScore W4321353680C2777904410 @default.
- W4321353680 hasConceptScore W4321353680C41008148 @default.
- W4321353680 hasConceptScore W4321353680C553261973 @default.
- W4321353680 hasConceptScore W4321353680C64869954 @default.
- W4321353680 hasConceptScore W4321353680C9357733 @default.
- W4321353680 hasConceptScore W4321353680C97686452 @default.
- W4321353680 hasLocation W43213536801 @default.
- W4321353680 hasOpenAccess W4321353680 @default.
- W4321353680 hasPrimaryLocation W43213536801 @default.
- W4321353680 hasRelatedWork W1566618018 @default.
- W4321353680 hasRelatedWork W1843794072 @default.
- W4321353680 hasRelatedWork W2019168903 @default.
- W4321353680 hasRelatedWork W2360139790 @default.
- W4321353680 hasRelatedWork W2362847699 @default.
- W4321353680 hasRelatedWork W2563096791 @default.
- W4321353680 hasRelatedWork W2915009611 @default.
- W4321353680 hasRelatedWork W2942625968 @default.
- W4321353680 hasRelatedWork W4240545424 @default.
- W4321353680 hasRelatedWork W2901649410 @default.
- W4321353680 isParatext "false" @default.
- W4321353680 isRetracted "false" @default.
- W4321353680 workType "book-chapter" @default.