<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
If I understand correctly, I suspect that what you want to do is to
implement in Racket parsers for Java and C code, which parse those
to ASTs using Racket syntax objects. Then you can do analysis for
many security vulnerabilities just using Racket "match" on the
syntax, and static processing. You still have the halting problem,
of course.<br>
<br>
After that, a different approach can use the ASTs a different way,
to execute/simulate the code, but with additional protections. For
example, you could simulate C code (and the hardware on which it
runs) but with checks to detect unsafe situations as they occur in
fuzz testing. This one is a lot of work to implement, and there are
already other ways to do some of this, but maybe your unusual
approach will let you do something that existing approaches cannot.<br>
<br>
Neil V.<br>
<br>
<div class="moz-cite-prefix">mansour.alqattan wrote at 05/28/2014
01:42 PM:<br>
</div>
<blockquote
cite="mid:5sf1f1r1rqboi4yymfj622c2.1401298926834@email.android.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<span style="font-family: arial, sans-serif; font-size: 13px; ">Dear </span>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">Thank you
for your consideration and help in advance. I have three
question and I hope you can help me with it:<br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">1- First
is there any program or technique for translate Java code or C
code or any other languages to Scheme Code.</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">I need to
translate from </div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">scm -
> java</div>
<div style="font-family:arial,sans-serif;font-size:13px">java -
> scm</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">C - >
scm</div>
<div style="font-family:arial,sans-serif;font-size:13px">scm -
> C</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px">2- Is
there potential features for finding or detecting the recent
vulnerabilities by using Scheme language or any other language?</div>
<div style="font-family:arial,sans-serif;font-size:13px"><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana">3- I have been
asked to design a pattern which can formalize the potential
vulnerability on source code.</span><br>
</div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana"><br>
</span></div>
<div><font color="#444444" face="Verdana">4- My final question is
there a potential technique to translate any
intermediate languages code to other format to clarify
the vulnerabilities of the code? if yes then how .. is there
potential technique and tools?</font></div>
<div><font color="#444444" face="Verdana"><br>
</font></div>
<div><font color="#444444" face="Verdana">I was thinking to
translate the intermediate language to scheme code then to
find tool which can analyse the scheme code to find the
vulnerabilities. but i don't know how</font></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana"><br>
</span></div>
<div><font color="#444444" face="Verdana">Please I need answer for
these questions as I am doing a research at the moment and I
stuck in someways. the intermediate language that i am using
is not meant to be for executing but it is used for
understanding the IBM assembler.</font></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana"><br>
</span></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana">I look forward
to hear from you soon </span></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana"><br>
</span></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana">Thanks</span></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana"><br>
</span></div>
<div style="font-family:arial,sans-serif;font-size:13px"><span
style="color:rgb(68,68,68);font-family:Verdana">Mansour
Alqattan</span></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">____________________
Racket Users list:
<a class="moz-txt-link-freetext" href="http://lists.racket-lang.org/users">http://lists.racket-lang.org/users</a>
</pre>
</blockquote>
<br>
</body>
</html>