<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
<section id="safe_numerics.bibliography">
  <title>Bibliography</title>

  <bibliography>
    <biblioentry id="coker">
      <abbrev>Coker</abbrev>

      <author>
        <firstname>Zack</firstname>

        <surname>Coker</surname>
      </author>

      <author>
        <firstname>Samir</firstname>

        <surname>Hasan</surname>
      </author>

      <author>
        <firstname>Jeffrey</firstname>

        <surname>Overbey</surname>
      </author>

      <author>
        <firstname>Munawar</firstname>

        <surname>Hafiz</surname>
      </author>

      <author>
        <firstname>Christian</firstname>

        <surname>Kästner</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="https://www.cs.cmu.edu/~ckaestne/pdf/csse14-01.pdf">Integers In
          C: An Open Invitation To Security Attacks?</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">JTC1/SC22/WG21 -
        The C++ Standards Committee - ISOCPP</ulink>
      </publishername>

      <date>January 15, 2012</date>
    </biblioentry>

    <biblioentry id="cook">
      <abbrev>Cook</abbrev>

      <author>
        <firstname>John D.</firstname>

        <surname>Cook</surname>
      </author>

      <title>
        <ulink
        url="https://www.johndcook.com/blog/ieee_exceptions_in_cpp/">IEEE
        floating-point exceptions in C++</ulink>
      </title>
    </biblioentry>

    <biblioentry id="crowl">
      <abbrev>Crowl</abbrev>

      <author>
        <firstname>Lawrence</firstname>

        <surname>Crowl</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2012/n3352.html">C++
          Binary Fixed-Point Arithmetic</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">JTC1/SC22/WG21 -
        The C++ Standards Committee - ISOCPP</ulink>
      </publishername>

      <date>January 15, 2012</date>
    </biblioentry>

    <biblioentry id="crowl2">
      <abbrev>Crowl &amp; Ottosen</abbrev>

      <author>
        <firstname>Lawrence</firstname>

        <surname>Crowl</surname>
      </author>

      <author>
        <surname>Thorsten Ottosen</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2006/n1962.html">Proposal
          to add Contract Programming to C++</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">WG21/N1962 and
        J16/06-0032 - The C++ Standards Committee - ISOCPP</ulink>
      </publishername>

      <date>February 25, 2006</date>
    </biblioentry>

    <biblioentry id="dietz">
      <abbrev>Dietz</abbrev>

      <author>
        <firstname>Will</firstname>

        <surname>Dietz</surname>
      </author>

      <author>
        <firstname>Peng</firstname>

        <surname>Li</surname>
      </author>

      <author>
        <firstname>John</firstname>

        <surname>Regehr</surname>
      </author>

      <author>
        <firstname>Vikram</firstname>

        <surname>Adve</surname>
      </author>

      <title>
        <ulink
        url="http://www.cs.utah.edu/~regehr/papers/overflow12.pdf">Understanding
        Integer Overflow in C/C++</ulink>
      </title>

      <publishername>
        <ulink
        url="http://dl.acm.org/citation.cfm?id=2337223&amp;picked=prox">Proceedings
        of the 34th International Conference on Software Engineering (ICSE),
        Zurich, Switzerland</ulink>
      </publishername>

      <date>June 2012</date>
    </biblioentry>

    <biblioentry id="garcia">
      <abbrev>Garcia</abbrev>

      <author>
        <firstname>J. Daniel</firstname>

        <surname>Garcia</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2014/n4293.pdf">C++
          language support for contract programming</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink url="http://www.open-std.org/jtc1/sc22/wg21/">WG21/N4293 - The
        C++ Standards Committee - ISOCPP</ulink>
      </publishername>

      <date>December 23, 2014</date>
    </biblioentry>

    <biblioentry id="goldberg">
      <abbrev>Goldberg</abbrev>

      <author>
        <firstname>David</firstname>

        <surname>Goldberg</surname>
      </author>

      <title>
        <ulink
        url="https://docs.oracle.com/cd/E19957-01/806-3568/ncg_goldberg.html">What
        Every Computer Scientist Should Know About Floating-Point
        Arithmetic</ulink>
      </title>

      <publishername>
        <ulink url="https://csur.acm.org/index.cfm">ACM Computing
        Surveys</ulink>
      </publishername>

      <date>March, 1991</date>
    </biblioentry>

    <biblioentry id="katz">
      <abbrev>Katz</abbrev>

      <author>
        <firstname>Omer</firstname>

        <surname>Katz</surname>
      </author>

      <title>
        <ulink
        url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">SafeInt
        code proposal</ulink>
      </title>

      <publishername>
        <ulink
        url="https://groups.google.com/a/isocpp.org/forum/?fromgroups#!forum/std-proposals">Boost
        Developer's List</ulink>
      </publishername>

      <abstract>
        <para>Posts of various authors regarding a proposed SafeInt library
        for boost</para>
      </abstract>
    </biblioentry>

    <biblioentry id="keaton">
      <author>
        <firstname>David</firstname>

        <surname>Keaton</surname>
      </author>

      <author>
        <firstname>Thomas</firstname>

        <surname>Plum</surname>
      </author>

      <author>
        <firstname>Robert</firstname>

        <othername>C.</othername>

        <surname>Seacord</surname>
      </author>

      <author>
        <firstname>David</firstname>

        <surname>Svoboda</surname>
      </author>

      <author>
        <firstname>Alex</firstname>

        <surname>Volkovitsky</surname>
      </author>

      <author>
        <firstname>Timothy</firstname>

        <surname>Wilson</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://resources.sei.cmu.edu/asset_files/TechnicalNote/2009_004_001_15074.pdf">As-if
          Infinitely Ranged Integer Model</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink url="http://www.sei.cmu.edu">Software Engineering
        Institute</ulink>
      </publishername>

      <volumenum>CMU/SEI-2009-TN-023</volumenum>

      <abstract>
        <para>Presents a model for addressing integer overflow errors.</para>
      </abstract>
    </biblioentry>

    <biblioentry id="leblanc1">
      <abbrev>LeBlanc</abbrev>

      <author>
        <firstname>David</firstname>

        <surname>LeBlanc</surname>
      </author>

      <title>
        <ulink
        url="https://msdn.microsoft.com/en-us/library/ms972705.aspx">Integer
        Handling with the C++ SafeInt Class</ulink>
      </title>

      <publishername>
        <ulink url="https://www.cert.org">Microsoft Developer Network</ulink>
      </publishername>

      <date>January 7, 2004</date>
    </biblioentry>

    <biblioentry id="leblanc2">
      <abbrev>LeBlanc</abbrev>

      <author>
        <firstname>David</firstname>

        <surname>LeBlanc</surname>
      </author>

      <title>
        <ulink url="https://safeint.codeplex.com">SafeInt</ulink>
      </title>

      <publishername>
        <ulink url="https://www.cert.org">CodePlex</ulink>
      </publishername>

      <date>Dec 3, 2014</date>
    </biblioentry>

    <biblioentry id="lions">
      <abbrev>Lions</abbrev>

      <author>
        <firstname>Jacques-Louis</firstname>

        <surname>Lions</surname>
      </author>

      <title>
        <ulink
        url="https://en.wikisource.org/wiki/Ariane_501_Inquiry_Board_report">Ariane
        501 Inquiry Board report</ulink>
      </title>

      <publishername>
        <ulink
        url="https://en.wikisource.org/wiki/Main_Page">Wikisource</ulink>
      </publishername>

      <date>July 19, 1996</date>
    </biblioentry>

    <biblioentry id="matthews">
      <abbrev>Matthews</abbrev>

      <author>
        <firstname>Hubert</firstname>

        <surname>Matthews</surname>
      </author>

      <title>
        <ulink url="https://accu.org/index.php/journals/324">CheckedInt: A
        Policy-Based Range-Checked Integer</ulink>
      </title>

      <publishername>
        <ulink url="https://accu.org/index.php">Overload Journal #58</ulink>
      </publishername>

      <date>December 2003</date>
    </biblioentry>

    <biblioentry id="mouawad">
      <abbrev>Mouawad</abbrev>

      <author>
        <firstname>Jad</firstname>

        <surname>Mouawad</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://www.nytimes.com/2015/05/01/business/faa-orders-fix-for-possible-power-loss-in-boeing-787.html?_r=0">F.A.A
          Orders Fix for Possible Power Loss in Boeing 787</ulink>
        </ulink>
      </title>

      <publishername>New York Times</publishername>

      <date>April 30, 2015</date>

      <abstract>
        <para>Federal regulators will order operators of Boeing 787
        Dreamliners to shut down the plane’s electrical power periodically
        after Boeing discovered a software error that could result in a total
        loss of power.</para>
      </abstract>
    </biblioentry>

    <biblioentry id="plakosh">
      <abbrev>Plakosh</abbrev>

      <author>
        <firstname>Daniel</firstname>

        <surname>Plakosh</surname>
      </author>

      <title>
        <ulink
        url="https://buildsecurityin.us-cert.gov/bsi/articles/knowledge/coding/312-BSI.html">Safe
        Integer Operations</ulink>
      </title>

      <publishername>
        <ulink url="https://buildsecurityin.us-cert.gov">U.S. Department of
        Homeland Security</ulink>
      </publishername>

      <date>May 10, 2013</date>
    </biblioentry>

    <biblioentry id="seacord1">
      <abbrev>Seacord</abbrev>

      <author>
        <firstname>Robert C.</firstname>

        <surname>Seacord</surname>
      </author>

      <title>
        <ulink
        url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">Secure
        Coding in C and C++</ulink>
      </title>

      <edition>2nd Edition</edition>

      <publishername>Addison-Wesley Professional</publishername>

      <date>April 12, 2013</date>

      <isbn>978-0321822130</isbn>
    </biblioentry>

    <biblioentry id="seacord2">
      <abbrev>INT30-C</abbrev>

      <author>
        <firstname>Robert C.</firstname>

        <surname>Seacord</surname>
      </author>

      <title>
        <ulink
        url="https://www.securecoding.cert.org/confluence/display/seccode/INT32-C.+Ensure+that+operations+on+signed+integers+do+not+result+in+overflow?showComments=false">INT30-C.
        Ensure that operations on unsigned integers do not wrap</ulink>
      </title>

      <publishername>
        <ulink url="https://www.cert.org">Software Engineering Institute,
        Carnegie Mellon University</ulink>
      </publishername>

      <date>August 17, 2014</date>
    </biblioentry>

    <biblioentry id="seacord3">
      <abbrev>INT32-C</abbrev>

      <author>
        <firstname>Robert C.</firstname>

        <surname>Seacord</surname>
      </author>

      <title>
        <ulink
        url="https://www.securecoding.cert.org/confluence/display/c/INT30-C.+Ensure+that+unsigned+integer+operations+do+not+wrap">INT32-C.
        Ensure that operations on signed integers do not result in
        overflow</ulink>
      </title>

      <publishername>
        <ulink url="https://www.cert.org">Software Engineering Institute,
        Carnegie Mellon University</ulink>
      </publishername>

      <date>August 17, 2014</date>
    </biblioentry>

    <biblioentry id="stone">
      <abbrev>Stone</abbrev>

      <author>
        <firstname>David</firstname>

        <surname>Stone</surname>
      </author>

      <title>
        <ulink url="http://doublewise.net/c++/bounded/">C++ Bounded Integer
        Library</ulink>
      </title>
    </biblioentry>

    <biblioentry id="stroustrup">
      <abbrev>Stroustrup</abbrev>

      <author>
        <firstname>Bjarn</firstname>

        <surname>Stroustrup</surname>
      </author>

      <title>The C++ Programming Language</title>

      <edition>Fourth Edition</edition>

      <publishername>
        <ulink
        url="http://www.open-std.org/jtc1/sc22/wg21/">Addison-Wesley</ulink>
      </publishername>

      <copyright>
        <year>2014 by Pearson Education, Inc.</year>
      </copyright>

      <date>January 15, 2012</date>
    </biblioentry>

    <biblioentry id="forum">
      <abbrev>Forum</abbrev>

      <author>
        <surname>Forum Posts</surname>
      </author>

      <title>
        <ulink url="http://www.cert.org/secure-coding/publications/books/secure-coding-c-c-second-edition.cfm?">
          <ulink
          url="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2012/n3352.html">C++
          Binary Fixed-Point Arithmetic</ulink>
        </ulink>
      </title>

      <publishername>
        <ulink
        url="https://groups.google.com/a/isocpp.org/forum/?fromgroups#!forum/std-proposals">ISO
        C++ Standard Future Proposals</ulink>
      </publishername>

      <abstract>
        <para>Posts of various authors regarding proposal to add safe integer
        to C++ standard libraries</para>
      </abstract>
    </biblioentry>
  </bibliography>
</section>
