"Modular Bug-finding for Integer Overflows in the Large: Sound, Efficient, Bit-precise Static Analysis" By Yannick Moy et al.: http://research.microsoft.com/apps/pubs/?id=80722 Bye, bearophile