Finding Error Handling Bugs in OpenSSL Using Coccinelle

Julia Lawall (1) , Ben Laurie (2) , René Rydhof Hansen (3) , Nicolas Palix (1) , Gilles Muller (4)

1 DIKU - Department of Computer Science [Copenhagen]
2 Google Inc
3 AAU - Aalborg University [Denmark]
4 Regal - Large-Scale Distributed Systems and Applications

OpenSSL is a library providing various functionalities relating to secure network communication. Detecting and fixing bugs in OpenSSL code is thus essential, particularly when such bugs can lead to malicious attacks. In previous work, we have proposed a methodology for finding API usage protocols in Linux kernel code using the program matching and transformation engine Coccinelle. In this work, we report on our experience in applying this methodology to OpenSSL, focusing on API usage protocols related to error handling. This work has resulted in detection of over 30 bugs in a recent snapshot of OpenSSL, and in many cases it was possible to correct the bugs automatically. Our patches correcting these bugs have been accepted by the OpenSSL developers. This work furthermore confirms the applicability of our methodology to user-level code.

Mots clés: Software quality; Software evolution; Static code analysis

Domaines: Informatique [cs]

Julia Lawall, Ben Laurie, René Rydhof Hansen, Nicolas Palix, Gilles Muller. Finding Error Handling Bugs in OpenSSL Using Coccinelle. European Dependable Computing Conference, Apr 2010, Valencia, Spain. pp.191-196, ⟨10.1109/EDCC.2010.31⟩. ⟨hal-00940375⟩