Logo

    static

    Explore "static" with insightful episodes like "How can automated code repair help DoD with legacy code vulnerability analysis?", "Hiatus Watch #12 - Theories", "Automating Repair of Pervasive Software Flaws", "Hiatus Watch #11 - Revisiting Cat Fingers" and "Hiatus Watch #10 - Zach Callison Interview" from podcasts like ""SEI Shorts", "Steven University", "SEI Shorts", "Steven University" and "Steven University"" and more!

    Episodes (100)

    Automating Repair of Pervasive Software Flaws

    Automating Repair of Pervasive Software Flaws

    Manually fixing coding errors is time- and money-consuming. As a result, teams charged to make the fixes can eliminate few vulnerabilities; and fixing errors often breaks the working code, adding unwanted delay in testing. The SEI has developed a tool to detect and automatically repair integer overflow and reads of stale sensitive data, two pervasive software flaws. You can find more on SEI’s technique for automated code repair in “Inference of Memory Bounds: Preventing the Next Heartbleed” at https://insights.sei.cmu.edu/sei_blog....

    For more information, write to info@sei.cmu.edu.