Defensive programming method based on function access global variables

Abstract

The invention relates to a defensive programming method based on function access global variables, which is characterized by comprising the following steps of: (1) hiding global variable names: enabling the protected declaration of global variables to not appear in a quoted header file, and providing a defined file as a binary file or prescribing that names which are not contained in the declaration of the header file can not be used through programming specification files, thereby realizing the purpose of hiding the global variable names; (2) declaring an access function of the global variables and a data structure of the global variables: declaring the data structure of the global variables and the access function of the global variables in the header file, adding a mutex lock in the data structure of the global variables, and respectively declaring an acquiring function and a modifying function; and (3) defining the access function of the global variables: selecting asserted defense or other existing function defense methods, programming code defense, context access defense and mutex defense in the definition phase of the access function of the global variables. The invention can prevent wrong global variables from being accessed in the programming process, realize global variable access of different rights, and automatically judge the context to shield the access of the task which has no right to access the global variables.

Description

technical field [0001] The invention relates to a computer program security method, in particular to a security defense method used in software with defensive programming requirements, in particular to a defensive programming method based on function access to global variables. Background technique [0002] We all know that defensive programming is a careful and careful programming method. In order to develop reliable software, each component in the system needs to be designed so that it "protects" itself as much as possible. Defend against assumption errors by explicitly checking for them in the code. This effort prevents (or at least detects) code being invoked in a potentially erroneous manner with undefined results. Defensive programming catches smaller problems early on, rather than waiting until they grow into catastrophes. Of course, defensive programming does not eliminate all programming errors. But questions will be less annoying and easier to modify. Defensiv...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to design a defensive programming method based on function access to global variables for existing defensive programming methods that mostly ignore the security issues caused by global variables