DOCSLIB.ORG

Analysis and Modeling of the Product Structure And

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Analysis and Modeling of the Product Structure And ANALYSIS AND MODELING OF THE PRODUCT STRUCTURE AND COMMUNITY STRUCTURE IN OPEN SOURCE PROCESSES By QIZE LE A dissertation submitted in partial fulfillment of the requirements for the degree of Doctor of Philosophy WASHINGTON STATE UNIVERSITY School of Mechanical and Materials Engineering August 2012 To the Faculty of Washington State University: The Members of the Committee appointed to examine the dissertation of QIZE LE find it satisfactory and recommend that it be accepted. ______________________________ Jitesh H. Panchal, Ph.D., Chair _______________________________ Sankar Jayaram, Ph.D. _______________________________ Thomas Rotolo, Ph.D. ii ACKNOWLEDGMENT First of all, I would like to thank my mother and father for all the encouragement and support they have given me to pursue the Ph.D. degree in the United State. Without their continuous financial and emotional support, I could have not achieved any of my goals during the past twenty six years. I want to thank my advisor - Dr. Jitesh H. Panchal for providing me continuous guidance and advice during the past four years. Dr. Panchal helped me to determine my research topic, gave me valuable advice during my studies, and discussed with me about board research issues and research inspirations. Without his instruction, I could have not achieved the thesis and other papers published in journals and conferences. Therefore, I would like to thank him again for giving me an opportunity to work with him and to conduct new and exciting research topics under his advice. I would like to thank my committee members Dr. Sankar Jayaram and Dr. Thomas Rotolo for their advice and comments on this thesis. Their comments helped me to improve my work and broaden my knowledge. I want to thank all of my lab mates - Haoyun Huang, Zhenghui Sha, Yiwen Liu, Bryant Hawthorne, Marc Somers, and Martin Baker. Haoyun Huang and Zhenghui Sha has provided me many valuable comments and thoughts on my research and published paper. Bryant spent a lot of time on discussing with me about research and polishing my English. For all the other lab mates, I would like to thank them as being a big family of Collective Systems Laboratory. Also, I would like to thank all of my friends in China and United States I would like to thank School of Mechanical and Materials Engineering for providing iii me admission and assistantship for my Ph.D. studies. This work presented in the thesis has been supported by NSF CAREER # 0954447. I am grateful for the financial support from NSF, without which this work would not be finished. iv ANALYSIS AND MODELING OF THE PRODUCT STRUCTURE AND COMMUNITY STRUCTURE IN OPEN SOURCE PROCESSES ABSTRACT by QIZE LE, Ph.D. Washington State University August, 2012 Chair: Jitesh H, Panchal Open source product development refers to a paradigm where large numbers of participants collaborate in the form of communities to develop new products and services. The fundamental differences between traditional product development and open source process are that the former is based on top-down decomposition while the latter is based on evolution and self-organization. The paradigm of open source processes has resulted in highly successful products such as Linux and Apache. Despite the success of various projects using open source processes, it is not well understood how the product structures and community structures evolve over time. In response, the main objective in this thesis is to analyze and model product structures and community structures of open source processes over time. The research objective consists of three parts: 1) the characterization of product structures in the open v source processes, 2) the evolutionary characteristics of product structures in the open source processes over time, 3) the co-evolution of product structure and community structures over time. To achieve the first research objective, an agent-based model is proposed to simulate the open source processes. The characterization of product structures on the open source process is analyzed based on a mobile phone example. To achieve the second research objective, an open source software project - Drupal is employed as the case studies. The evolution of product structure is determined by node- level mechanisms. To achieve the third research objective, the co-evolution of product structures and community structures is studied at different levels. The results from this research include new knowledge about the evolution of the product structures and co- evolution of product and community structures over time in open source processes. vi Table of Contents ACKNOWLEDGMENT ................................................................................................................ iii ABSTRACT .................................................................................................................................... v LIST OF TABLES ......................................................................................................................... ix LIST OF FIGURES ....................................................................................................................... xii 1. CHAPTER ONE - INTRODUCTION TO OPEN SOURCE PROCESSES AND RESEARCH QUESTIONS ............................................................................................................. 1 Section 1.1 - Introduction to Open Source Processes .............................................................................................................................. 2 Section 1.2 - Research Motivation ........................................................................................................................................................... 5 Section 1.3 - Research Questions, Approaches, Tasks, and Contributions .............................................................................................. 8 Section 1.4 - Assumptions in the Open Source Processes ...................................................................................................................... 19 Section 1.5 - Overview of the Dissertation ............................................................................................................................................ 20 2. CHAPTER TWO - BACKGROUND AND LITERATURE REVIEW ................................ 25 Section 2.1 - Existing Studies on Product Structures in Open Source Processes ................................................................................... 27 Section 2.2 - Existing Studies on Community Structures in Open Source Processes ............................................................................. 35 Section 2.3 - Existing Studies on the Network Generation Model ......................................................................................................... 38 Section 2.4 - Existing Studies on Interdependencies between Product Structure and Community Structure ......................................... 41 Section 2.5 - Research Gaps .................................................................................................................................................................. 46 3. CHAPTER THREE - ANALYSIS AND MODELING EFFECT OF PRODUCT STRUCTURE ON OPEN SOURCE PROCESSES ...................................................................... 51 Section 3.1 - Motivation: Answering RQ1 ............................................................................................................................................ 51 Section 3.2 - Background: Agent-based Modeling (ABM) .................................................................................................................... 53 Section 3.3 - Details of the Agent-Based Model of open source processes ............................................................................................ 54 Section 3.4 - Illustrative Example – Development of Mobile Phones using Mass-Collaborative Product Development Processes ....... 63 Section 3.5 - Results from the Execution of the Model for different Mobile Phone architectures ......................................................... 69 Section 3.6 - Discussion and Future Works ........................................................................................................................................... 80 4. CHAPTER FOUR - ANALYSIS AND MODELING PRODUCT STRUCTURE ON OPEN SOURCE PROCESSES ................................................................................................................ 83 Section 4.1 - Motivation: Answering RQ2 ............................................................................................................................................ 83 Section 4.2 - Node-level Mechanisms Associated with Product Evolution............................................................................................ 85 Section 4.3 - Network-Level Analysis of the Evolution of Drupal ........................................................................................................ 92 Section 4.4 - Generative Model for the Evolution of Product Structure ................................................................................................ 99 Section 4.5 - Conclusion and Future Works ........................................................................................................................................ 108 vii 5. CHAPTER FIVE - ANALYSIS OF CO-EVOLUTION BETWEEN PRODUCT STRUCTURE AND COMMUNITY STRUCTURE .................................................................
Load more

Recommended publications
  • Multimedia Systems DCAP303
    Multimedia Systems DCAP303 MULTIMEDIA SYSTEMS Copyright © 2013 Rajneesh Agrawal All rights reserved Produced & Printed by EXCEL BOOKS PRIVATE LIMITED A-45, Naraina, Phase-I, New Delhi-110028 for Lovely Professional University Phagwara CONTENTS Unit 1: Multimedia 1 Unit 2: Text 15 Unit 3: Sound 38 Unit 4: Image 60 Unit 5: Video 102 Unit 6: Hardware 130 Unit 7: Multimedia Software Tools 165 Unit 8: Fundamental of Animations 178 Unit 9: Working with Animation 197 Unit 10: 3D Modelling and Animation Tools 213 Unit 11: Compression 233 Unit 12: Image Format 247 Unit 13: Multimedia Tools for WWW 266 Unit 14: Designing for World Wide Web 279 SYLLABUS Multimedia Systems Objectives: To impart the skills needed to develop multimedia applications. Students will learn: z how to combine different media on a web application, z various audio and video formats, z multimedia software tools that helps in developing multimedia application. Sr. No. Topics 1. Multimedia: Meaning and its usage, Stages of a Multimedia Project & Multimedia Skills required in a team 2. Text: Fonts & Faces, Using Text in Multimedia, Font Editing & Design Tools, Hypermedia & Hypertext. 3. Sound: Multimedia System Sounds, Digital Audio, MIDI Audio, Audio File Formats, MIDI vs Digital Audio, Audio CD Playback. Audio Recording. Voice Recognition & Response. 4. Images: Still Images – Bitmaps, Vector Drawing, 3D Drawing & rendering, Natural Light & Colors, Computerized Colors, Color Palletes, Image File Formats, Macintosh & Windows Formats, Cross – Platform format. 5. Animation: Principle of Animations. Animation Techniques, Animation File Formats. 6. Video: How Video Works, Broadcast Video Standards: NTSC, PAL, SECAM, ATSC DTV, Analog Video, Digital Video, Digital Video Standards – ATSC, DVB, ISDB, Video recording & Shooting Videos, Video Editing, Optimizing Video files for CD-ROM, Digital display standards.
    [Show full text]
  • Developing a Voice-Controlled Home-Assisting System for KTH Live-In Labs
    DEGREE PROJECT IN ELECTRICAL ENGINEERING, SECOND CYCLE, 60 CREDITS STOCKHOLM, SWEDEN 2018 Developing a voice-controlled home-assisting system for KTH Live-in Labs SHREYANS MALOO KTH ROYAL INSTITUTE OF TECHNOLOGY SCHOOL OF ELECTRICAL ENGINEERING AND COMPUTER SCIENCE Contents Acknowledgments 4 Abstract 5 Sammanfattning 6 List of Figures 9 List of Tables 10 1 Introduction 11 1.1 Outline . 11 1.2 Problem Statement . 13 2 Methodology 14 3 Background 15 3.1 Speech to Text Services . 15 3.2 Communication Protocols . 20 3.3 Ethics and Society . 23 4 Design 24 4.1 Basic Model . 24 4.2 Map of Alternatives . 26 4.2.1 Voice Command . 26 4.2.2 Speech to Text (STT) Service . 27 4.2.3 Logic Engine . 27 4.2.4 Communication Protocol . 27 4.2.5 Final Output . 28 2 CONTENTS CONTENTS 4.3 Failure Factors . 29 4.3.1 Speech to Text . 29 4.3.2 Text to Keywords . 31 4.3.3 Keyword to action . 32 5 Implementation 34 5.1 Raspberry Pi . 34 5.1.1 What is Raspberry Pi? . 34 5.1.2 Setting up the Pi . 35 5.2 IBM Bluemix . 44 5.2.1 Getting started with Bluemix . 44 5.2.2 Linking our Pi to our device in Bluemix . 48 5.3 Node-RED . 49 5.3.1 Setting up Node-RED on our Pi . 49 5.4 Prototype 1 . 51 5.5 Prototype 2 . 65 5.6 Prototype 3 . 79 5.6.1 Conversation service . 80 5.6.2 Node-RED . 91 6 Results and Discussion 95 7 Conclusion and Future Work 99 3 Acknowledgments I would like to reserve this space to thank my supervisor Elena Malakhatka for her endless support and dedication and for the brainstorming sessions that offered me guidance throughout all the stages of the project.
    [Show full text]
  • Library Media – Early Childhood Through Young Adulthood
    National Board Certification Support Library Media Early Childhood Through Young Adulthood Table of Contents Guide to National Board Certification General Portfolio Instructions ePortfolio Resources Content Area Standards Component I Component II Component III Component IIII Forms Additional Resources Guide to National Board Certification Guide to National Board Certification Version 3.1 Register online at www.nbpts.org/national-board-certification ® Prepared by Pearson for submission under contract with the National Board for Professional Teaching Standards © 2020 National Board for Professional Teaching Standards | All rights reserved. THIS PAGE INTENTIONALLY LEFT BLANK The fees and other terms and conditions contained in this Guide are subject to change. Please visit the National Board’s website to locate any changes or updates to applicable terms and conditions. Table of Contents Introduction .................................................................................................. 1 What is the National Board ....................................................................................................... 1 Certification – An Overview ........................................................................ 2 The Certification Process ........................................................................... 3 The Components ...................................................................................................................... 3 How to Register and Select Components ................................................
    [Show full text]
  • Smart Home Automation with Linux Smart
    CYAN YELLOW MAGENTA BLACK PANTONE 123 C BOOKS FOR PROFESSIONALS BY PROFESSIONALS® THE EXPERT’S VOICE® IN LINUX Companion eBook Available Smart Home Automation with Linux Smart Dear Reader, With this book you will turn your house into a smart and automated home. You will learn how to put together all the hardware and software needed for Automation Home home automation, to control appliances such as your teakettle, CCTV, light switches, and TV. You’ll be taught about the devices you can build, adapt, or Steven Goodwin, Author of hack yourself from existing technology to accomplish these goals. Cross-Platform Game In Smart Home Automation with Linux, you’ll discover the scope and possi- Programming bilities involved in creating a practical digital lifestyle. In the realm of media and Game Developer’s Open media control, for instance, you’ll learn how you can read TV schedules digitally Source Handbook and use them to program video remotely through e-mail, SMS, or a web page. You’ll also learn the techniques for streaming music and video from one machine to another, how to give your home its own Twitter and e-mail accounts for sending automatic status reports, and the ability to remotely control the home Smart Home lights or heating system. Also, Smart Home Automation with Linux describes how you can use speech synthesis and voice recognition systems as a means to converse with your household devices in new, futuristic, ways. Additionally, I’ll also show you how to implement computer-controlled alarm clocks that can speak your daily calendar, news reports, train delays, and local with weather forecasts.
    [Show full text]
  • Libde265 HEVC Performance Test Report
    libde265 HEVC Performance Test Report libde265 HEVC - High Efficiency Video Coding www.libde265.org Performance Test Report libde265 HEVC High Efficiency Video Coding (HEVC) is the new video compression standard, a successor to H.264/MPEG-4 AVC (Advanced Video Coding). HEVC was jointly developed by the ISO/IEC Moving Picture Experts Group (MPEG) and ITU-T Video Coding Experts Group (VCEG) as ISO/IEC 23008-2 MPEG-H Part 2 and ITU-T H.265. Greatly reduces the data com- pression rate compared to H.264/ MPEG-4 AVC Supports 8K UHD and resolutions up to 8192x4320 Cuts the costs for streaming and network bandwith by 50 % The libde265 HEVC app for iOS plays video streams in H.265 for- mat. Available on the App Store (Requires iOS6/7) HD video quality with Open Source Software API 50% of the bandwidth Users are given access to the libde265 HEVC is provided by Congestion-aware video decod- highest quality content even on struktur AG and licensed un- ing robustness for 3/4G and LTE slow connections. The libde265 der open source GNU Lesser network usage and a versatile HEVC codec will enable stream- General Public License (LGPL). API standard facilitate the adop- ing services to simultaneously libde265 will successfully open tion within web-browsers and deliver full HD video content to a field of consumer and pro- on-demand video streaming ser- twice as many users in com- fessional applications such as vices. Implementation examples parison to predecessor H.264 high-quality HD and 4K/8K UHD include Linux GStreamer plugin, video content, or cut the costs video streaming, low-latency/ Mac OS VLC, Windows Direct- for streaming and network band- low-bandwidth video conferenc- Show filter and ffmpeg.
    [Show full text]
  • Simple Audio Indexer Documentation Release 1.0.0
    Simple Audio Indexer Documentation Release 1.0.0 Alireza Rafiei Dec 28, 2020 Contents: 1 Installation 3 1.1 Native Installation............................................3 1.1.1 First step: IBM Credentials...................................3 1.1.2 Second Step: Installing sox...................................3 1.1.3 Third Step: Installing SAI...................................4 1.2 Offline indexing with CMU Pocketsphinx................................4 1.2.1 First step: Installing ffmpeg..................................4 1.2.2 Second step: Installing Pocketsphinx..............................4 1.2.3 Third step: Installing everything else..............................4 1.3 Docker route...............................................5 1.4 Uninstall.................................................5 1.4.1 Uninstall natively........................................5 1.4.2 Uninstalling CMU Pocketsphinx................................6 1.4.3 Uninstall the Docker version..................................6 2 Usage 7 2.1 As a command line script........................................7 2.1.1 The help command.......................................7 2.1.2 Timestamps...........................................7 2.1.3 Search Commands.......................................8 2.1.4 Saving & Loading indexed data................................8 2.2 As a Python library............................................8 2.2.1 Basics..............................................9 2.2.2 Indexing.............................................9 2.2.3 Saving & Loading Indexed
    [Show full text]
  • Here Make Use of the Command-Line and Command-Line (Or Text User Interface) Tools
    Command-Line Guide to Audio Files in Ubuntu | T u... http://localhost/wordpress/static/backup_cli_audio_g... Command-Line Guide to Audio Files in Ubuntu This guide focuses on showing you how to manipulate and convert various audio files using tools included in the Ubuntu repositories. It contains mostly everything you need to know to convert various formats to the free format Ogg Vorbis, including explanations on how to convert FLAC to WAV and vice-versa, convert FLAC, WAV, APE, AC3, WMA or SHN to Ogg Vorbis, edit tags from command-line for free audio formats, and much more. The guide is divided into the following sections, so that you can click on any of them to jump directly to the chapter which is of interest to you: Introduction to Audio Manipulation on Linux The Setup: Tools That We Need Converting FLAC to WAV and Vice-Versa Converting FLAC or WAV to Ogg Vorbis Editing Ogg Vorbis Tags Converting FLAC or WAV to MP3 Ripping Audio CDs Split FLAC, WAV or APE With a CUE File Converting WMA to Ogg Vorbis Converting APE to Ogg Vorbis or MP3 Converting AC3 to WAV Using MPlayer Music Players As a side note, this tutorial does not include references on how to edit or record sound (for example with Audacity or some other audio editor). Also, all the methods explained here make use of the command-line and command-line (or text user interface) tools. At the end of the guide there are several links to helpful links, a list of music players for Linux (both for GUI and CLI), as well as links to reviews for those.
    [Show full text]
  • Musixtex Using TEX to Write Polyphonic Or Instrumental Music Version 1.35
    MusiXTEX Using TEX to write polyphonic or instrumental music Version 1.35 Revised August 29, 2021 If you are not familiar with TEX at all, I would recommend to find another software package to do musical typesetting. Setting up TEX and MusiXTEX on your machine and mastering it is an awesome job which gobbles up a lot of your time and disk space. But, once you master it... Hans Kuykens (ca. 1995) In my humble opinion, that whole statement is obsolete. Christof Biebricher (2006) ii MusiXTEX may be freely copied, duplicated and used in conformance to the GNU General Public License (Version 2, 1991, see included file copying)1. You may take it or parts of it to include in other packages, but no packages called MusiXTEX without specific suffix may be distributed under the name MusiXTEX if different from the original distribution (except obvious bug cor- rections). Adaptations for specific implementations (e.g., fonts) should be provided as separate additional TEXorLATEX files which override original definitions. 1Thanks to the Free Software Foundation for advice. See http://www.gnu.org Preface MusiXTEX was developed by Daniel Taupin, Ross Mitchell and Andreas Egler, building on earlier work by Andrea Steinbach and Angelika Schofer. Unfortunately, Daniel Taupin, the main developer, died all too early in a 2003 climbing accident. The MusiXTEX community was shocked by this tragic and unexpected event. You may read tributes to Daniel Taupin that are archived at the Werner Icking Music Archive (WIMA). Since then, the only significant update to MusiXTEX has been in version 1.15 (April 2011) which takes advantage of the greater capacity of the eTEX version of TEX.
    [Show full text]
  • Anglia Ruskin University a Type-Safe Apparatus
    ANGLIA RUSKIN UNIVERSITY A TYPE-SAFE APPARATUS EXECUTING HIGHER ORDER FUNCTIONS IN CONJUNCTION WITH HARDWARE ERROR TOLERANCE JONATHAN RICHARD ROBERT KIMMITT A thesis in partial fulfilment of the requirements of Anglia Ruskin University for the degree of Doctor of Philosophy This research programme was carried out in collaboration with The University of Cambridge Submitted: October 2015 Acknowledgements This dissertation was self-funded and prepared in part fulfilment of the requirements of the degree of Doctor of Philosophy under the supervision of Dr David Greaves of The University of Cambridge, and Dr George Wilson and Professor Marcian Cirstea at Anglia Ruskin University, without whose help this dissertation would not have been possible. I am grateful to Dr John O’Donnell of The University of Glasgow and Dr Anil Madhavapeddy of The University of Cambridge for their willingness to examine the degree. Dedication Dedicated to my wife Christine Kimmitt i ANGLIA RUSKIN UNIVERSITY ABSTRACT FACULTY OF SCIENCE AND TECHNOLOGY DOCTOR OF PHILOSOPHY A TYPE-SAFE APPARATUS EXECUTING HIGHER ORDER FUNCTIONS IN CONJUNCTION WITH HARDWARE ERROR TOLERANCE JONATHAN RICHARD ROBERT KIMMITT October 2015 The increasing commoditization of computers in modern society has exceeded the pace of associated developments in reliability. Although theoretical computer science has advanced greatly in the last thirty years, many of the best techniques have yet to find their way into embedded computers, and their failure can have a great potential for disrupting society.
    [Show full text]
  • Non-Destructive Prediction and Monitoring of Postharvest Quality of Citrus Fruit
    Non-destructive Prediction and Monitoring of Postharvest Quality of Citrus Fruit By Lembe Samukelo Magwaza Dissertation presented for the Degree of Doctor of Philosophy (Agric) at Stellenbosch University Supervisor: Prof. U.L. Opara Co-supervisor: Prof. L.A. Terry Dept. of Horticultural Science Plant Science Laboratory Stellenbosch University Cranfield University South Africa United Kingdom Co-supervisor: Dr P.J.R. Cronje Co-supervisor: Dr H.H. Nieuwoudt Citrus Research International Institute for Wine Biotechnology Dept. of Horticultural Science Dept. of Viticulture and Oenology Stellenbosch University Stellenbosch University South Africa South Africa December 2013 Stellenbosch University http://scholar.sun.ac.za DECLARATION By submitting this dissertation electronically, I declare that the entirety of the work contained therein is my own, original work, that I am the owner of the copyright thereof (unless to the extent explicitly otherwise stated) and that I have not previously in its entirety or in part submitted it for obtaining any qualification. Signature: ...................................................... Date: ........................... Lembe Samukelo Magwaza I certify that the above statement is correct. Signature: ...................................................... Date: ........................... Prof. U.L. Opara Signature: ...................................................... Date: ........................... Prof. L.A. Terry Signature: ...................................................... Date: ..........................
    [Show full text]
  • Pdf/Acyclic.1.Pdf
    tldr pages Simplified and community-driven man pages Generated on Sun Sep 26 15:57:34 2021 Android am Android activity manager. More information: https://developer.android.com/studio/command-line/adb#am. • Start a specific activity: am start -n {{com.android.settings/.Settings}} • Start an activity and pass data to it: am start -a {{android.intent.action.VIEW}} -d {{tel:123}} • Start an activity matching a specific action and category: am start -a {{android.intent.action.MAIN}} -c {{android.intent.category.HOME}} • Convert an intent to a URI: am to-uri -a {{android.intent.action.VIEW}} -d {{tel:123}} bugreport Show an Android bug report. This command can only be used through adb shell. More information: https://android.googlesource.com/platform/frameworks/native/+/ master/cmds/bugreport/. • Show a complete bug report of an Android device: bugreport bugreportz Generate a zipped Android bug report. This command can only be used through adb shell. More information: https://android.googlesource.com/platform/frameworks/native/+/ master/cmds/bugreportz/. • Generate a complete zipped bug report of an Android device: bugreportz • Show the progress of a running bugreportz operation: bugreportz -p • Show the version of bugreportz: bugreportz -v • Display help: bugreportz -h cmd Android service manager. More information: https://cs.android.com/android/platform/superproject/+/ master:frameworks/native/cmds/cmd/. • List every running service: cmd -l • Call a specific service: cmd {{alarm}} • Call a service with arguments: cmd {{vibrator}} {{vibrate 300}} dalvikvm Android Java virtual machine. More information: https://source.android.com/devices/tech/dalvik. • Start a Java program: dalvikvm -classpath {{path/to/file.jar}} {{classname}} dumpsys Provide information about Android system services.
    [Show full text]
  • Buffer Overflow Vulnerabilities
    Buffer overflow vulnerabilities Questões de Segurança em Engenharia de Software (QSES) Mestrado em Segurança Informática Departamento de Ciência de Computadores Faculdade de Ciências da Universidade do Porto Eduardo R. B. Marques, [email protected] Introduction What is a buffer overflow? CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer “The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. “ This is a general definition for buffer overflow, that makes no distinction for: the type of operation: read or write the memory area: stack, heap, … (Q: heap? stack?) the position of invalid memory position relative to buffer: before (“underflow”) or after (proper “overflow”) the reason for invalid access: iteration, copy, pointer arithmetic A number of CWEs are specific instances of CWE-119 (next). 3 Specific types of buffer overflow CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow’) CWE-121 — Stack-Based Buffer Overflow — “[…] the buffer being overwritten is allocated on the stack […]” CWE-122 — Heap-Based Buffer Overflow — “[…] the buffer that can be overwritten is allocated in the heap portion of memory […]“ CWE-123: Write-what-where Condition - “ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow”. CWE-124: Buffer Underwrite ('Buffer Underflow’) CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read CWE-127: Buffer Under-read 4 Memory address space of a process high libc_start (0xFF..FF) main stack “Text” section = code (.text section in the ELF format) someFunc Global data sections global variables (e.g.
    [Show full text]