{'fraction_non_alphanumeric': 0.016798418972332016, 'fraction_numerical': 0.0, 'mean_word_length': 4.855491329479769, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Survey of array out of bound access checkers for C code

Array index out of bound is a common but critical vulnerability, which may crash the software system at runtime and results in irreparable damage, particularly in safety-critical systems. Use of static analysis for checking this vulnerability is the common approach to prevent it from occurring. Numbers of tools based on static analysis technique are available. This paper presents an evaluation of five such static analysis tools used for detection of this vulnerability. Among them, two are commercial tools Polyspace, Coverity; one is an academic tool ARCHER and the other two are open source tools UNO and CBMC. These tools have been evaluated with respect to four factors, namely, precision, scalability, soundness and execution time. Main objective of this study is to understand the techniques used to check properties similar to array index out of bound access in C code and to share our findings on the pros and cons of the different approaches.