View Code? Open in Web Editor NEW

APISan: Sanitizing API Usages through Semantic Cross-Checking

Python 0.65% ActionScript 0.03% Shell 0.09% CMake 0.26% Makefile 0.28% M4 0.06% Go 0.08% C++ 51.99% OCaml 0.25% CSS 0.02% Batchfile 0.02% Groff 0.02% Standard ML 0.01% C 19.22% SourcePawn 0.01% Objective-C 2.94% Assembly 4.72% Objective-C++ 0.88% HTML 0.69% LLVM 17.80%

apisan's Introduction

APISan: Sanitizing API Usages through Semantic Cross-Checking

Environments

Tested in Ubuntu 14.04
Setup

  $ ./setup.sh

How to build symbolic database

  $ apisan build [cmds]

Run './configure'

  $ apisan build ./configure
  $ apisan build make

How to run a checker

  $ apisan check --db=[db] --checker=[checker]

Example

  $ cd test/return-value
  $ ../../apisan build make
  $ ../../apisan check --checker=rvchk

Checkers (under analyzer/apisan/check)

Return value checker: retval.py
Argument checker: argument.py
Causality checker: causality.py
Condition checker: condition.py
Integer overflow checker: intovfl.py
Format string bug checker: fsb.py

Authors

Insu Yun [email protected]
Changwoo Min [email protected]
Xujie Si [email protected]
Yeongjin Jang [email protected]
Taesoo Kim [email protected]
Mayur Naik [email protected]

Publications

@inproceedings{yun:apisan,
  title        = {{APISan: Sanitizing API Usages through Semantic Cross-checking}},
  author       = {Insu Yun and Changwoo Min and Xujie Si and Yeongjin Jang and Taesoo Kim and Mayur Naik},
  booktitle    = {Proceedings of the 25th USENIX Security Symposium (Security)},
  month        = aug,
  year         = 2016,
  address      = {Austin, TX},
}

Recommend Projects