一句话:提出一种轻量级验证数组索引的方法,以防止越界访问导致的安全漏洞与程序崩溃。
该论文关注数组越界访问带来的问题:在 C 等语言中,越界访问会导致安全漏洞和程序崩溃;即使在 Java 等托管语言中,运行时的边界检查会抛出异常并终止程序。标题表明论文提出一种轻量级的数组索引验证方法,旨在静态地保证数组访问的安全性。然而,所提供的摘要仅描述了问题背景,未给出具体的方法细节与评估结果。因此,无法进一步概括其技术方案与实验结论。
In languages like C, out-of-bounds array accesses lead to security vulnerabilities and crashes. Even in managed languages like Java, which check array bounds at run time, out-of-bounds accesses cause exceptions that terminate the program.
DOI 原文 ·
@inproceedings{paperbot4840,
title = {Lightweight verification of array indexing},
author = {Martin Kellogg and Vlastimil Dort and Suzanne Millstein and Michael D. Ernst},
booktitle = {ISSTA},
year = {2018},
doi = {10.1145/3213846.3213849}
}