Testing Heap Overflow Bugs Caused by Integer Overflows

Abstract

In recent years, many heap overflow vulnerabilities have been found in major applications. Integer overflows are involved with these vulnerabilities and are hard to audit. We propose a new testing approach to find this kind of bug. We first analyze the program source to identify tainted data flows. We then manipulate the program to test the integrity of these suspects. With this tool, we discover two new heap overflows in Antiword.