Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Mitigation Strategies

Static Analysis

We can catch these with a Violations of this rule can be detected using local flow analysis . We will assume assuming an integer range analysis to track the length of the strings. (Note: I am not entirely familiar with the literature on buffer-overflow analysis, but we should check that none of them already handle this scenario.)

...