Assisting in Auditing of Buffer Overflow Vulnerabilities via Machine Learning

Table 1

Description of three sink types.

Sink type	Example	Mapping value
Pointer dereference	p++ = 1	1
Array write	p[i] = 1	2
Dangerous function	strcpy(dst, src), strncpy(dst, src, n); strcat(dst, src), strncat(dst, src, n); memcpy(dst, src, n), memmove(dst, src, n); gets(str), fgets(str, n, fp)	3