Other Resources

• Integer Handling with the C++ SafeInt Class by David LeBlanc: http:// msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/ secure01142004.asp

• Another Look at the SafeInt Class by David LeBlanc: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure05052005.asp

• Reviewing Code for Integer Manipulation Vulnerabilities by Michael Howard: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure04102003.asp

• An Overlooked Construct and an Integer Overflow Redux by Michael Howard: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure09112003.asp

• Expert Tips for Finding Security Defects in Your Code by Michael Howard: http://msdn.microsoft.com/msdnmag/issues/03/11/SecurityCodeReview/default.aspx

• Integer overflows the next big threat by Ravind Ramesh: http://star-techcentral.com/tech/story.asp?file=/2004/10/26/itfeature/ 9170256&sec=itfeature

• DOS against Java JNDI/DNS: http://archives.neohapsis.com/archives/bugtraq/2004-11/0092.html