Skip to main content

Module integer_overflow_arith

Module integer_overflow_arith 

Source
Expand description

integer_overflow_arith - does this binary op overflow on attacker input? CWE-190 supporting predicate.

Per node n, write 1 iff n is a binary arithmetic node (mul / add / shl) AND at least one operand is reachable from @http_input_family AND there is no dominating overflow check.

Structs§

IntegerOverflowArith
Soundness marker for integer_overflow_arith.

Functions§

integer_overflow_arith
Build an overflow-check Program: arith_set AND attacker_reach AND NOT overflow_check_dominates.