CorCA - Correction of C/C++ Automatically

• Identify BO and generate their exploits
• Reduce the rate of false positives produced by static analysis
• Produce fixes, repair the code, and validate the correctness and effectiveness of the fixes in an automated way
• Achieves an accuracy and precision close to 100%

Input(s):

• C/C++ source code of a program to test

Main feature(s):

• Identifies buffer overflows in C/C++ programs and confirm their existence
• Removes BO by correcting the code and validate the corrections made
• Generate a new release of the program

Output(s):

• New version of the program without vulnerabilities
• A report with the vulnerabilities found and fixed

• Python 3
• AFL
• Flawfinder
• pycparser

Software developers, Software testers.

Open-source restricted and permission required.