Flow-sensitive buffer overrun detection based on syntax node

This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing security-critical C source code. We demonstrate one algorithm with flow-sensitive analysis to gain variable´s activity area. Different from other tools, the detection and analyzing process of our algorithm is based on syntax node which makes it context sensitive, and also makes the system scalable and fast owing to limited kinds of syntax nodes of C language. Based on them, a prototype has been built and used to identify several vulnerabilities in popular security critical applications.