{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:21:24Z","timestamp":1750306884089,"version":"3.41.0"},"reference-count":29,"publisher":"Association for Computing Machinery (ACM)","issue":"4a","license":[{"start":{"date-parts":[[2012,3,18]],"date-time":"2012-03-18T00:00:00Z","timestamp":1332028800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGPLAN Not."],"published-print":{"date-parts":[[2012,6,18]]},"abstract":"<jats:p>In this paper we propose a scheme that combines type inference and run-time checking to make existing C programs type safe. We describe the CCured type system, which extends that of C by separating pointer types according to their usage. This type sysiem allows both pointers whose usage can be verified statically to be type safe, and pointers whose safety must be checked at run time. We prove a type soundness result and then we present a surprisingly simple type inference algoriihm that is able lo infer the appropriate pointer kinds for existing C programs.<\/jats:p>\n          <jats:p>Our experience wiih the CCured sysiem shows that the inference is very effective for many C programs, as it is able to infer that most or all of the pointers are statically verifiable to be type safe. The remaining pointers are instrumented wiih efficient run-time checks to ensure that they are used safely. The resulting performance loss due to run-time checks is 0-150%, which is several times better than comparable approaches thai use only dynamic checking. Using CCured we have discovered programming bugs in established C programs such as several SPECINT95 benchmarks.<\/jats:p>","DOI":"10.1145\/2442776.2442786","type":"journal-article","created":{"date-parts":[[2013,2,22]],"date-time":"2013-02-22T19:25:04Z","timestamp":1361561104000},"page":"74-85","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["CCured"],"prefix":"10.1145","volume":"47","author":[{"given":"George C.","family":"Necula","sequence":"first","affiliation":[{"name":"University of California, Berkeley"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Scott","family":"McPeak","sequence":"additional","affiliation":[{"name":"University of California, Berkeley"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Westley","family":"Weimer","sequence":"additional","affiliation":[{"name":"University of California, Berkeley"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,3,18]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/103135.103138"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/773473.178446"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380180902"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/91556.91590"},{"key":"e_1_2_1_5_1","unstructured":"L. Cardelli J. Donahue L. Glassman M. Jordan B. Kalsow and G. Nelson. Modula3 report 1989.  L. Cardelli J. Donahue L. Glassman M. Jordan B. Kalsow and G. Nelson. Modula3 report 1989."},{"volume-title":"Princeton University Department of Computer Science","year":"1996","author":"Carlisle M. C.","key":"e_1_2_1_6_1"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/113445.113469"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/316158.316183"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/249069.231389"},{"volume-title":"Proceedings of the Usenix","year":"1992","author":"Hastings R.","key":"e_1_2_1_10_1"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/141471.141542"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/647163.717683"},{"volume-title":"AADEBUG","year":"1997","author":"Jones R. W. M.","key":"e_1_2_1_13_1"},{"key":"e_1_2_1_14_1","first-page":"161","volume-title":"Proceedings of the Summer Usenix Conference","author":"Kaufer S.","year":"1988"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01025919"},{"volume-title":"Springer-Verlag","year":"1981","author":"Liskov B.","key":"e_1_2_1_17_1"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/645369.651280"},{"key":"e_1_2_1_19_1","first-page":"119","volume-title":"Automated and Algorithmic Debugging","author":"Patil H.","year":"1995"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/250900.250910"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292553"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/263699.263707"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268970"},{"key":"e_1_2_1_24_1","volume-title":"1999 ACM Foundations on Software Engineering Conference (LNCS 1687)","volume":"1687","author":"Sift M.","year":"1999"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-6423(97)00030-0"},{"key":"e_1_2_1_26_1","unstructured":"SPEC 95. Standard Performance Evaluation Corportation Benchmarks. http:\/\/www.spee.org\/osg\/cpu95\/UINT95 July 1995.  SPEC 95. Standard Performance Evaluation Corportation Benchmarks. http:\/\/www.spee.org\/osg\/cpu95\/UINT95 July 1995."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380220403"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/96709.96747"},{"key":"e_1_2_1_29_1","first-page":"1","volume-title":"Network Distributed Systems Security Symposium","author":"Wagner D.","year":"2000"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/239912.239917"}],"container-title":["ACM SIGPLAN Notices"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2442776.2442786","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2442776.2442786","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:18:39Z","timestamp":1750234719000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2442776.2442786"}},"subtitle":["type-safe retrofitting of legacy code"],"short-title":[],"issued":{"date-parts":[[2012,3,18]]},"references-count":29,"journal-issue":{"issue":"4a","published-print":{"date-parts":[[2012,6,18]]}},"alternative-id":["10.1145\/2442776.2442786"],"URL":"https:\/\/doi.org\/10.1145\/2442776.2442786","relation":{},"ISSN":["0362-1340","1558-1160"],"issn-type":[{"type":"print","value":"0362-1340"},{"type":"electronic","value":"1558-1160"}],"subject":[],"published":{"date-parts":[[2012,3,18]]},"assertion":[{"value":"2012-03-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}