Skip to main content

Table 4 The condition of the code snippet in Fig. 9

From: ELAID: detecting integer-Overflow-to-Buffer-Overflow vulnerabilities by light-weight and accurate static analysis

Condition type

Content of condition

Overflow condition

n>MAX/8

Intra-procedural path constraint (IntraPC)

n<=(1<<30)∧n=t− > x

One-level inter-procedural path constraint (InterPC)

s− > x>=0∧s− > x<=100

Parameter passing condition (ParamPassing)

s− > x=t− > x

The whole constraintΠ

(n>MAX/8)∧(n<=1<<30∧n=t− > x)∧ (s− > x>=0∧s− > x<=100)∧(s− > x=t− > x)