bibliography.xml 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
  3. "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
  4. <section id="safe_numerics.bibliography">
  5. <title>Bibliography</title>
  6. <bibliography>
  7. <biblioentry id="coker">
  8. <abbrev>Coker</abbrev>
  9. <author>
  10. <firstname>Zack</firstname>
  11. <surname>Coker</surname>
  12. </author>
  13. <author>
  14. <firstname>Samir</firstname>
  15. <surname>Hasan</surname>
  16. </author>
  17. <author>
  18. <firstname>Jeffrey</firstname>
  19. <surname>Overbey</surname>
  20. </author>
  21. <author>
  22. <firstname>Munawar</firstname>
  23. <surname>Hafiz</surname>
  24. </author>
  25. <author>
  26. <firstname>Christian</firstname>
  27. <surname>Kästner</surname>
  28. </author>
  29. <title>
  30. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  31. <ulink
  32. url="https://www.cs.cmu.edu/~ckaestne/pdf/csse14-01.pdf">Integers In
  33. C: An Open Invitation To Security Attacks?</ulink>
  34. </ulink>
  35. </title>
  36. <publishername>
  37. <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">JTC1/SC22/WG21 -
  38. The C++ Standards Committee - ISOCPP</ulink>
  39. </publishername>
  40. <date>January 15, 2012</date>
  41. </biblioentry>
  42. <biblioentry id="cook">
  43. <abbrev>Cook</abbrev>
  44. <author>
  45. <firstname>John D.</firstname>
  46. <surname>Cook</surname>
  47. </author>
  48. <title>
  49. <ulink
  50. url="https://www.johndcook.com/blog/ieee_exceptions_in_cpp/">IEEE
  51. floating-point exceptions in C++</ulink>
  52. </title>
  53. </biblioentry>
  54. <biblioentry id="crowl">
  55. <abbrev>Crowl</abbrev>
  56. <author>
  57. <firstname>Lawrence</firstname>
  58. <surname>Crowl</surname>
  59. </author>
  60. <title>
  61. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  62. <ulink
  63. url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2012/n3352.html">C++
  64. Binary Fixed-Point Arithmetic</ulink>
  65. </ulink>
  66. </title>
  67. <publishername>
  68. <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">JTC1/SC22/WG21 -
  69. The C++ Standards Committee - ISOCPP</ulink>
  70. </publishername>
  71. <date>January 15, 2012</date>
  72. </biblioentry>
  73. <biblioentry id="crowl2">
  74. <abbrev>Crowl &amp; Ottosen</abbrev>
  75. <author>
  76. <firstname>Lawrence</firstname>
  77. <surname>Crowl</surname>
  78. </author>
  79. <author>
  80. <surname>Thorsten Ottosen</surname>
  81. </author>
  82. <title>
  83. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  84. <ulink
  85. url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2006/n1962.html">Proposal
  86. to add Contract Programming to C++</ulink>
  87. </ulink>
  88. </title>
  89. <publishername>
  90. <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">WG21/N1962 and
  91. J16/06-0032 - The C++ Standards Committee - ISOCPP</ulink>
  92. </publishername>
  93. <date>February 25, 2006</date>
  94. </biblioentry>
  95. <biblioentry id="dietz">
  96. <abbrev>Dietz</abbrev>
  97. <author>
  98. <firstname>Will</firstname>
  99. <surname>Dietz</surname>
  100. </author>
  101. <author>
  102. <firstname>Peng</firstname>
  103. <surname>Li</surname>
  104. </author>
  105. <author>
  106. <firstname>John</firstname>
  107. <surname>Regehr</surname>
  108. </author>
  109. <author>
  110. <firstname>Vikram</firstname>
  111. <surname>Adve</surname>
  112. </author>
  113. <title>
  114. <ulink
  115. url="http://www.cs.utah.edu/~regehr/papers/overflow12.pdf">Understanding
  116. Integer Overflow in C/C++</ulink>
  117. </title>
  118. <publishername>
  119. <ulink
  120. url="http://dl.acm.org/citation.cfm?id=2337223&amp;picked=prox">Proceedings
  121. of the 34th International Conference on Software Engineering (ICSE),
  122. Zurich, Switzerland</ulink>
  123. </publishername>
  124. <date>June 2012</date>
  125. </biblioentry>
  126. <biblioentry id="garcia">
  127. <abbrev>Garcia</abbrev>
  128. <author>
  129. <firstname>J. Daniel</firstname>
  130. <surname>Garcia</surname>
  131. </author>
  132. <title>
  133. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  134. <ulink
  135. url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2014/n4293.pdf">C++
  136. language support for contract programming</ulink>
  137. </ulink>
  138. </title>
  139. <publishername>
  140. <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">WG21/N4293 - The
  141. C++ Standards Committee - ISOCPP</ulink>
  142. </publishername>
  143. <date>December 23, 2014</date>
  144. </biblioentry>
  145. <biblioentry id="goldberg">
  146. <abbrev>Goldberg</abbrev>
  147. <author>
  148. <firstname>David</firstname>
  149. <surname>Goldberg</surname>
  150. </author>
  151. <title>
  152. <ulink
  153. url="https://docs.oracle.com/cd/E19957-01/806-3568/ncg_goldberg.html">What
  154. Every Computer Scientist Should Know About Floating-Point
  155. Arithmetic</ulink>
  156. </title>
  157. <publishername>
  158. <ulink url="https://csur.acm.org/index.cfm">ACM Computing
  159. Surveys</ulink>
  160. </publishername>
  161. <date>March, 1991</date>
  162. </biblioentry>
  163. <biblioentry id="katz">
  164. <abbrev>Katz</abbrev>
  165. <author>
  166. <firstname>Omer</firstname>
  167. <surname>Katz</surname>
  168. </author>
  169. <title>
  170. <ulink
  171. url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">SafeInt
  172. code proposal</ulink>
  173. </title>
  174. <publishername>
  175. <ulink
  176. url="https://groups.google.com/a/isocpp.org/forum/?fromgroups#!forum/std-proposals">Boost
  177. Developer's List</ulink>
  178. </publishername>
  179. <abstract>
  180. <para>Posts of various authors regarding a proposed SafeInt library
  181. for boost</para>
  182. </abstract>
  183. </biblioentry>
  184. <biblioentry id="keaton">
  185. <author>
  186. <firstname>David</firstname>
  187. <surname>Keaton</surname>
  188. </author>
  189. <author>
  190. <firstname>Thomas</firstname>
  191. <surname>Plum</surname>
  192. </author>
  193. <author>
  194. <firstname>Robert</firstname>
  195. <othername>C.</othername>
  196. <surname>Seacord</surname>
  197. </author>
  198. <author>
  199. <firstname>David</firstname>
  200. <surname>Svoboda</surname>
  201. </author>
  202. <author>
  203. <firstname>Alex</firstname>
  204. <surname>Volkovitsky</surname>
  205. </author>
  206. <author>
  207. <firstname>Timothy</firstname>
  208. <surname>Wilson</surname>
  209. </author>
  210. <title>
  211. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  212. <ulink
  213. url="http://resources.sei.cmu.edu/asset_files/TechnicalNote/2009_004_001_15074.pdf">As-if
  214. Infinitely Ranged Integer Model</ulink>
  215. </ulink>
  216. </title>
  217. <publishername>
  218. <ulink url="http://www.sei.cmu.edu">Software Engineering
  219. Institute</ulink>
  220. </publishername>
  221. <volumenum>CMU/SEI-2009-TN-023</volumenum>
  222. <abstract>
  223. <para>Presents a model for addressing integer overflow errors.</para>
  224. </abstract>
  225. </biblioentry>
  226. <biblioentry id="leblanc1">
  227. <abbrev>LeBlanc</abbrev>
  228. <author>
  229. <firstname>David</firstname>
  230. <surname>LeBlanc</surname>
  231. </author>
  232. <title>
  233. <ulink
  234. url="https://msdn.microsoft.com/en-us/library/ms972705.aspx">Integer
  235. Handling with the C++ SafeInt Class</ulink>
  236. </title>
  237. <publishername>
  238. <ulink url="https://www.cert.org">Microsoft Developer Network</ulink>
  239. </publishername>
  240. <date>January 7, 2004</date>
  241. </biblioentry>
  242. <biblioentry id="leblanc2">
  243. <abbrev>LeBlanc</abbrev>
  244. <author>
  245. <firstname>David</firstname>
  246. <surname>LeBlanc</surname>
  247. </author>
  248. <title>
  249. <ulink url="https://safeint.codeplex.com">SafeInt</ulink>
  250. </title>
  251. <publishername>
  252. <ulink url="https://www.cert.org">CodePlex</ulink>
  253. </publishername>
  254. <date>Dec 3, 2014</date>
  255. </biblioentry>
  256. <biblioentry id="lions">
  257. <abbrev>Lions</abbrev>
  258. <author>
  259. <firstname>Jacques-Louis</firstname>
  260. <surname>Lions</surname>
  261. </author>
  262. <title>
  263. <ulink
  264. url="https://en.wikisource.org/wiki/Ariane_501_Inquiry_Board_report">Ariane
  265. 501 Inquiry Board report</ulink>
  266. </title>
  267. <publishername>
  268. <ulink
  269. url="https://en.wikisource.org/wiki/Main_Page">Wikisource</ulink>
  270. </publishername>
  271. <date>July 19, 1996</date>
  272. </biblioentry>
  273. <biblioentry id="matthews">
  274. <abbrev>Matthews</abbrev>
  275. <author>
  276. <firstname>Hubert</firstname>
  277. <surname>Matthews</surname>
  278. </author>
  279. <title>
  280. <ulink url="https://accu.org/index.php/journals/324">CheckedInt: A
  281. Policy-Based Range-Checked Integer</ulink>
  282. </title>
  283. <publishername>
  284. <ulink url="https://accu.org/index.php">Overload Journal #58</ulink>
  285. </publishername>
  286. <date>December 2003</date>
  287. </biblioentry>
  288. <biblioentry id="mouawad">
  289. <abbrev>Mouawad</abbrev>
  290. <author>
  291. <firstname>Jad</firstname>
  292. <surname>Mouawad</surname>
  293. </author>
  294. <title>
  295. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  296. <ulink
  297. url="http://www.nytimes.com/2015/05/01/business/faa-orders-fix-for-possible-power-loss-in-boeing-787.html?_r=0">F.A.A
  298. Orders Fix for Possible Power Loss in Boeing 787</ulink>
  299. </ulink>
  300. </title>
  301. <publishername>New York Times</publishername>
  302. <date>April 30, 2015</date>
  303. <abstract>
  304. <para>Federal regulators will order operators of Boeing 787
  305. Dreamliners to shut down the plane’s electrical power periodically
  306. after Boeing discovered a software error that could result in a total
  307. loss of power.</para>
  308. </abstract>
  309. </biblioentry>
  310. <biblioentry id="plakosh">
  311. <abbrev>Plakosh</abbrev>
  312. <author>
  313. <firstname>Daniel</firstname>
  314. <surname>Plakosh</surname>
  315. </author>
  316. <title>
  317. <ulink
  318. url="https://buildsecurityin.us-cert.gov/bsi/articles/knowledge/coding/312-BSI.html">Safe
  319. Integer Operations</ulink>
  320. </title>
  321. <publishername>
  322. <ulink url="https://buildsecurityin.us-cert.gov">U.S. Department of
  323. Homeland Security</ulink>
  324. </publishername>
  325. <date>May 10, 2013</date>
  326. </biblioentry>
  327. <biblioentry id="seacord1">
  328. <abbrev>Seacord</abbrev>
  329. <author>
  330. <firstname>Robert C.</firstname>
  331. <surname>Seacord</surname>
  332. </author>
  333. <title>
  334. <ulink
  335. url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">Secure
  336. Coding in C and C++</ulink>
  337. </title>
  338. <edition>2nd Edition</edition>
  339. <publishername>Addison-Wesley Professional</publishername>
  340. <date>April 12, 2013</date>
  341. <isbn>978-0321822130</isbn>
  342. </biblioentry>
  343. <biblioentry id="seacord2">
  344. <abbrev>INT30-C</abbrev>
  345. <author>
  346. <firstname>Robert C.</firstname>
  347. <surname>Seacord</surname>
  348. </author>
  349. <title>
  350. <ulink
  351. url="https://www.securecoding.cert.org/confluence/display/seccode/INT32-C.+Ensure+that+operations+on+signed+integers+do+not+result+in+overflow?showComments=false">INT30-C.
  352. Ensure that operations on unsigned integers do not wrap</ulink>
  353. </title>
  354. <publishername>
  355. <ulink url="https://www.cert.org">Software Engineering Institute,
  356. Carnegie Mellon University</ulink>
  357. </publishername>
  358. <date>August 17, 2014</date>
  359. </biblioentry>
  360. <biblioentry id="seacord3">
  361. <abbrev>INT32-C</abbrev>
  362. <author>
  363. <firstname>Robert C.</firstname>
  364. <surname>Seacord</surname>
  365. </author>
  366. <title>
  367. <ulink
  368. url="https://www.securecoding.cert.org/confluence/display/c/INT30-C.+Ensure+that+unsigned+integer+operations+do+not+wrap">INT32-C.
  369. Ensure that operations on signed integers do not result in
  370. overflow</ulink>
  371. </title>
  372. <publishername>
  373. <ulink url="https://www.cert.org">Software Engineering Institute,
  374. Carnegie Mellon University</ulink>
  375. </publishername>
  376. <date>August 17, 2014</date>
  377. </biblioentry>
  378. <biblioentry id="stone">
  379. <abbrev>Stone</abbrev>
  380. <author>
  381. <firstname>David</firstname>
  382. <surname>Stone</surname>
  383. </author>
  384. <title>
  385. <ulink url="http://doublewise.net/c++/bounded/">C++ Bounded Integer
  386. Library</ulink>
  387. </title>
  388. </biblioentry>
  389. <biblioentry id="stroustrup">
  390. <abbrev>Stroustrup</abbrev>
  391. <author>
  392. <firstname>Bjarn</firstname>
  393. <surname>Stroustrup</surname>
  394. </author>
  395. <title>The C++ Programming Language</title>
  396. <edition>Fourth Edition</edition>
  397. <publishername>
  398. <ulink
  399. url="http://www.open-std.org/jtc1/sc22/wg21/">Addison-Wesley</ulink>
  400. </publishername>
  401. <copyright>
  402. <year>2014 by Pearson Education, Inc.</year>
  403. </copyright>
  404. <date>January 15, 2012</date>
  405. </biblioentry>
  406. <biblioentry id="forum">
  407. <abbrev>Forum</abbrev>
  408. <author>
  409. <surname>Forum Posts</surname>
  410. </author>
  411. <title>
  412. <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
  413. <ulink
  414. url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2012/n3352.html">C++
  415. Binary Fixed-Point Arithmetic</ulink>
  416. </ulink>
  417. </title>
  418. <publishername>
  419. <ulink
  420. url="https://groups.google.com/a/isocpp.org/forum/?fromgroups#!forum/std-proposals">ISO
  421. C++ Standard Future Proposals</ulink>
  422. </publishername>
  423. <abstract>
  424. <para>Posts of various authors regarding proposal to add safe integer
  425. to C++ standard libraries</para>
  426. </abstract>
  427. </biblioentry>
  428. </bibliography>
  429. </section>