Re: [RFC][Draft patch] Introduce IntegerSanitizer in GCC.

[Jeff Law]

On 07/12/2016 02:48 AM, Maxim Ostapenko wrote:

void foo (unsigned len)
{
    ...................
    void *p = malloc (len);
}

void bar ()
{
    ...................
    unsigned len = a + b;
    foo (len);
}
Inlining & lto can help here as could a symbolic execution engine. 
This is precisely the kidn of analysis we need to be moving into.

Jeff