See this document in CiteSeerX!

WYSINWYX: What You See Is Not What You eXecute  (Make Corrections)  
G. Balakrishnan, T. Reps, D. Melski, and T. Teitelbaum Comp. Sci. Dept.,...



  Home/Search   Context   Related

 
View or download:
wisc.edu/wpis/papers/wysinwyx05.ps
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  wisc.edu/wpis/papers/ (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: What You See Is Not What You eXecute: computers do not execute source-code programs; they execute machine-code programs that are generated from source code. Not only can the WYSINWYX phenomenon create a mismatch between what a programmer intends and what is actually executed by the processor, it can cause analyses that are performed on source code to fail to detect certain bugs and vulnerabilities. This issue arises regardless of whether one's favorite approach to assuring that programs... (Update)

Active bibliography (related documents):   More   All
1.4:   A Next-Generation Platform for Analyzing Executables - Reps Balakrishnan Lim   (Correct)
1.4:   Intermediate-Representation Recovery from Low-Level Code - Thomas Reps Gogul   (Correct)
0.9:   Weighted Pushdown Systems and Weighted Transducers - Lal, Touili, Kidd, Reps   (Correct)

Similar documents based on text:
0.0:   Unknown -   (Correct)

BibTeX entry:   (Update)

@misc{ melski-wysinwyx,
  author = "Balakrishnan Reps Melski",
  title = "WYSINWYX: What You See Is Not What You eXecute",
  url = "citeseer.ist.psu.edu/762389.html" }
Citations (may not include all citations):
815   Abstract interpretation: A unified lattice model for static .. (context) - Cousot, Cousot - 1977
390   Interprocedural slicing using dependence graphs - Horwitz, Reps et al. - 1990
270   Bandera: Extracting finite-state models from Java source cod.. - Corbett, Dwyer et al. - 2000
180   Efficient context-sensitive pointer analysis for C programs - Wilson, Lam - 1995
151   Reachability analysis of pushdown automata: Application to m.. - Bouajjani, Esparza et al. - 1997
144   Two approaches to interprocedural data flow analysis (context) - Sharir, Pnueli - 1981
140   Model checking Java programs using Java PathFinder - Havelund, Pressburger - 2000
100   Checking system rules using system-specific (context) - Engler, Chelf et al. - 2000
88   Lazy abstraction - Henzinger, Jhala et al. - 2002
85   Patterns in property specifications for finite-state verific.. - Dwyer, Avrunin et al. - 1999
84   A direct symbolic approach to model checking pushdown system.. - Finkel, Willems et al. - 1997
72   A first step towards automated detection of buffer overrun v.. - Wagner, Foster et al. - 2000
59   A static analyzer for finding dynamic programming errors - Bush, Pincus et al. - 2000
58   MOPS: An infrastructure for examining security properties of.. - Chen, Wagner - 2002
51   ESP: Path-sensitive program verification in polynomial time - Das, Lerner et al. - 2002
41   Translation validation for an optimizing compiler - Necula - 2000
37   DOC: A practical approach to source-level debugging of globa.. (context) - Coutant, Meloy et al. - 1988
33   Alias analysis of executable code - Debray, Muth et al. - 1998
32   Interactive Source-Level Debugging of Optimized Programs (context) - Zellweger - 1984
32   Translation validation - Pnueli, Siegel et al. - 1998
30   Systems for late code modification - Wall - 1992
25   Symbolic debugging of optimized code (context) - Hennessy - 1982
24   The SLAM toolkit (context) - Ball, Rajamani - 2001
23   Weighted pushdown systems and their application to interproc.. (context) - Reps, Schwoon et al. - 2003
23   Weighted pushdown systems and their application to interproc.. (context) - Reps, Schwoon et al. - 2005
17   A generic approach to the static analysis of concurrent prog.. - Bouajjani, Esparza et al. - 2003
17   Analyzing memory accesses in x86 executables - Balakrishnan, Reps - 2004
15   Model-Checking Pushdown Systems (context) - Schwoon - 2002
13   Intraprocedural static slicing of binary executables - Cifuentes, Fraboulet - 1997
9   Extended weighted pushdown systems - Lal, Reps et al. - 2005
9   Data dependence analysis of assembly code - Amme, Braun et al. - 2000
8   library for weighted pushdown systems (context) - Kidd, Reps et al. - 2004
7   Abstract interpretation based certification of assembly code (context) - Rival - 2003
6   Practical and accurate low-level pointer analysis (context) - Guo, Bridges et al. - 2005
6   Some bad news and some good news (context) - Howard - 2002
5   A framework for numeric analysis of array operations - Gopan, Reps et al. - 2005
4   Improving pushdown system model checking - Lal, Reps - 2006
3   Intermediate-representation recovery from low-level code - Reps, Balakrishnan et al. - 2006
1   Formal verification of self modifying code (context) - Gerth - 1991
1   Windows Hardware and Driver Central (context) - driver-specific, October - 2004
1   Threads cannot be implemented as a library (context) - Boehm - 2005
http://www.datarescue.com/idabase/
http://www.fmi.uni-stuttgart.de/szs/tools/moped/"
http://www.grammatech.com/products/codesurfer/

Documents on the same site (http://www.cs.wisc.edu/wpis/papers/):   More
Program Generalization for Software Reuse: From C to C++ - Siff, Reps (1996)   (Correct)
Modular Pointer Analysis - Susan Horwitz And   (Correct)
Weighted Pushdown Systems and Weighted Transducers - Lal, Touili, Kidd, Reps   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC