Improving integer security for systems with KINT

Integer errors have emerged as an important threat to sys-tems security, because they allow exploits such as buffer overflow and privilege escalation. This paper presents KINT, a tool that uses scalable static analysis to detect integer errors in C programs. KINT generates constraints from source code and user annotations, and feeds them into a constraint solver for deciding whether an integer error can occur. KINT introduces a number of techniques to reduce the number of false error reports. KINT identi-fied more than 100 integer errors in the Linux kernel, the