Skip to main content

Table 8 Comparison between IO2BO and IO2IPBO sites

From: ELAID: detecting integer-Overflow-to-Buffer-Overflow vulnerabilities by light-weight and accurate static analysis

Programs

IO2BO

IO2IPBO

Performance Comparison

 

#sites

Analysis time(s)

#sites

Analysis time(s)

Detection improvement

Overhead in time(s)

gocr

24

3

30

3

25%

0

jasper

84

5

157

5

87%

0

cpio

19

< 1

41

2

116%

1X

libexif

19

< 1

40

2

110%

1X

jbig2dec

14

< 1

27

5

92.8%

4X

swftools

242

15

422

19

74.4%

0.27X

linux kernel

325

6567

348

7766

7%

0.18X

Average

-

-

-

-

73.2%

0.92X