Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Software

AIR Integer Model

  • November 2014
  • The AIR model is used for eliminating integer overflow and truncation in C and C++ programs.
  • Secure Coding
  • Publisher: Software Engineering Institute
  • Abstract

    The As-If Infinitely Ranged (AIR) Integer Model is a largely automated mechanism used for eliminating integer overflow and integer truncation. This model either produces a value equivalent to one that would have been obtained using infinitely ranged integers or reports a runtime constraint violation. Unlike previous integer models, AIR integers do not require precise traps and consequently do not break or inhibit most existing optimizations.

    Instrumented Fuzz Testing Using AIR Integers (of libraries compiled using a prototype AIR integer compiler) has been effective in discovering vulnerabilities in software, with low false positive and false negative rates.

Software Information

Published by Software Engineering Institute

Get the Software