~/talk

C to checked C by 3c

on YouTube 30m
Talkat OOPSLA 2022 · 2022-12-05..12-10· [c-and-cpp, security]

speakers

name:Aravind Machiry
links:none on file
name:John Kastner
links:none on file
name:Matt McCutchen
links:none on file
name:Aaron Eline
links:none on file
name:Kyle Headley
links:none on file
name:Michael Hicks
bluesky:did:plc:ar3iq5andgbyif4ce75f6ydj

resources

video:https://youtu.be/bIwSY5WXy4g
slides:none on file

summary

3C is a static-analysis annotation tool that uses two novel algorithms, typ3c and boun3c, to infer Checked C pointer kinds and array bounds; it converts about 67% of pointers and infers 77% of bounds across 11 real programs (319KLoC) in under a minute per run. The workflow highlights small sets of root-cause pointers (about 91) for human refactoring, offers LSP integration for interactive fixes, and emits runtime bounds checks that currently terminate on violation.

AI-written summary · about

chapters (9)

  1. 0:00Start
  2. 0:21Memory Safety is a Problem (Still!!?)
  3. 1:00Heap buffer overread in UEFI driver
  4. 11:49Type qualifier inference
  5. 13:42Isolation Across Function Boundaries Does Not Work!
  6. 14:08Conflicting Requirements!
  7. 22:53Evaluation: Runtime
  8. 23:56Evaluation: Conversion Failures
  9. 25:07Evaluation: Effectiveness of Interactive Conversion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.