IntRepair：通知修复网络溢出
IntRepair: Informed Repairing of Integer Overflows
摘要：
几十年来，溢出威胁着软件应用程序。因此，在本文中，我们提出了一种新的技术，提供自动修复整数溢出的C源代码。我们的技术，基于静态符号执行，融合检测，修复生成和验证。这项技术在一个名为IntRepair的原型中实现。我们将IntRepair应用于2，052个C程序（约1，000个）。100万行代码）包含在SAMATE的朱丽叶测试套件和50个合成程序，范围高达20千字节。我们的实验结果表明，IntRepair能够有效地检测整数溢出并成功修复它们，同时仅分别增加约1%的源代码（KB）和二进制（Kb）大小。此外，我们提出了一个有30名参与者的用户研究的结果，该研究表明，与手动生成的代码修复相比，IntRepair修复的效率超过10倍
英文摘要：
Integer overflows have threatened software applications for decades. Thus, in this paper, we propose a novel technique to provide automatic repairs of integer overflows in C source code. Our technique, based on static symbolic execution, fuses detection, repair generation and validation. This technique is implemented in a prototype named IntRepair. We applied IntRepair to 2,052C programs (approx. 1 million lines of code) contained in SAMATE's Juliet test suite and 50 synthesized programs that range up to 20KLOC. Our experimental results show that IntRepair is able to effectively detect integer overflows and successfully repair them, while only increasing the source code (LOC) and binary (Kb) size by around 1%, respectively. Further, we present the results of a user study with 30 participants which shows that IntRepair repairs are more than 10x efficient as compared to manually generated code repairs
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
