Skip to main content

Table 8 Comparison between IO2BO and IO2IPBO sites

From: ELAID: detecting integer-Overflow-to-Buffer-Overflow vulnerabilities by light-weight and accurate static analysis

Programs IO2BO IO2IPBO Performance Comparison
  #sites Analysis time(s) #sites Analysis time(s) Detection improvement Overhead in time(s)
gocr 24 3 30 3 25% 0
jasper 84 5 157 5 87% 0
cpio 19 < 1 41 2 116% 1X
libexif 19 < 1 40 2 110% 1X
jbig2dec 14 < 1 27 5 92.8% 4X
swftools 242 15 422 19 74.4% 0.27X
linux kernel 325 6567 348 7766 7% 0.18X
Average - - - - 73.2% 0.92X