Check out the new USENIX Web site. next up previous
Next: Type Error Categorization Up: Using CQUAL for Static Previous: Complete Authorization


We ran the experiments on Linux version 2.4.9 with the September 4th, 2001 LSM patch. We used GCC version 3.0.2 and CQUAL version 0.9 for our static analysis.

We analyzed four subsystems of Linux: the file system (including ext2 physical file system), virtual memory management, networking, and IPC. The analysis generated 524 type errors (CQUAL inference conflicts). Below we give a detailed analysis of the type errors and discuss techniques in coping with false positives.


Catherine Zhang 2002-05-13