 |
People make mistakes in the process of building software, resulting in software bugs. Here are two examples of software disasters caused by an integer overflow in 2015. Boeing Dreamliner must reboot every 248 days to continue flying. Otherwise, an integer overflow could occur, causing the generator control unit to enter safe mode and lose all alternating current power. It is a reliability issue because an integer overflow occurred by input values defined in the specification. Another example is an integer overflow vulnerability that occurred in libstagefright, which Android uses to run the format such as MP4 files. When the sum of the chunk's size and size exceeds the maximum value that 32bit can express, memory corruption occurs and allows hackers to insert the desired malicious code. It is a security issue because an integer overflow occurred by the undefined chunk size. |
IEEE/ICACT20210212 Slide.03
[Big Slide]