The Meaning of Memory Safety

We give a rigorous characterization of what it means for a programming language to be memory safe, capturing the intuition that memory safety supports local reasoning about state. We formalize this principle in two ways. First, we show how a small memory-safe language validates a noninterference property: a program can neither affect nor be affected by unreachable parts of the state. Second, we extend separation logic, a proof system for heap-manipulating programs, with a memory-safe variant of its frame rule. The new rule is stronger because it applies even when parts of the program are buggy or malicious, but also weaker because it demands a stricter form of separation between parts of the program state. We also consider a number of pragmatically motivated variations on memory safety and the reasoning principles they support. As an application of our characterization, we evaluate the security of a previously proposed dynamic monitor for memory safety of heap-allocated data.Comment: POST'18 final versio

Acute viral hepatitis morbidity and mortality associated with hepatitis E virus infection: Uzbekistan surveillance data

<p>Abstract</p> <p>Background</p> <p>In Uzbekistan, routine serologic testing has not been available to differentiate etiologies of acute viral hepatitis (AVH). To determine the age groups most affected by hepatitis E virus (HEV) during documented AVH epidemics, trends in AVH-associated mortality rate (MR) per 100,000 over a 15-year period and reported incidence of AVH over a 35-year period were examined.</p> <p>Methods</p> <p>Reported AVH incidence data from 1971 to 2005 and AVH-associated mortality data from 1981 to 1995 were examined. Serologic markers for infection with hepatitis viruses A, B, D, and E were determined from a sample of hospitalized patients with AVH from an epidemic period (1987) and from a sample of pregnant women with AVH from a non-epidemic period (1992).</p> <p>Results</p> <p>Two multi-year AVH outbreaks were identified: one during 1975–1976, and one during 1985–1987. During 1985–1987, AVH-associated MRs were 12.3–17.8 per 100,000 for the general population. Highest AVH-associated MRs occurred among children in the first 3 years of life (40–190 per 100,000) and among women aged 20–29 (15–21 per 100,000). During 1988–1995 when reported AVH morbidity was much lower in the general population, AVH-associated MRs were markedly lower among these same age groups. In 1988, AVH-associated MRs were higher in rural (21 per 100,000) than in urban (8 per 100,000) populations (RR 2.6; 95% CI 1.16–5.93; p < 0.05). Serologic evidence of acute HEV infection was found in 280 of 396 (71%) patients with AVH in 1987 and 12 of 99 (12%) pregnant patients with AVH in 1992.</p> <p>Conclusion</p> <p>In the absence of the availability of confirmatory testing, inferences regarding probable hepatitis epidemic etiologies can sometimes be made using surveillance data, comparing AVH incidence with AVH-associated mortality with an eye to population-based viral hepatitis control measures. Data presented here implicate HEV as the probable etiology of high mortality observed in pregnant women and in children less than 3 years of age in Uzbekistan during 1985–1987. High mortality among pregnant women but not among children less than 3 years has been observed in previous descriptions of epidemic hepatitis E. The high mortality among younger children observed in an AVH outbreak associated with hepatitis E merits corroboration in future outbreaks.</p

Climate Change and the Rise and Fall of the Oxus Civilization in Southern Central Asia

International audienc