PICO

Memory safety violations such as buffer overflows are a threat to security this day. A common solution ensure memory for C is code instrumentation. However, often causes high execution-time overhead and therefore rarely used in production. Static analyses can reduce by proving some accesses bounds at compile time. In practice, however, static may fail verify in-bounds due over-approximation. Therefore, it important additionally optimize the checks that reside program. article, we present PICO, an approach eliminate replace checks. PICO exactly captures spatial of using Presburger formulas either them statically or substitute existing with more efficient ones. Thereby, generate which each covers multiple place infrequently executed locations. We evaluate our LLVM-based prototype well-known SoftBound instrumentation on SPEC benchmarks commonly related work. reduces introduced 36% average (and code-size 24%). Our evaluation shows impact substituting dominates removing provably redundant