Space memory error detection method with high efficiency and high availability

Abstract

The invention provides a space memory error detection method with high efficiency and high availability. The method comprises the following steps: carrying out static taint analysis on a program, and carrying out taint marking on a pointer which may be controlled by an attacker; building a shadow memory space before the program runs; storing boundary information of the taint marked pointer; creating the boundary information for the taint marked pointer in the program, and transmitting the information to other related pointers; and finally carrying out pointer boundary detection on an instruction for writing the memory by using the taint marked pointer in the program, inserting a code of tolerating the error into the program, so that the program can tolerate the space memory error to ensure the availability of the program. By adopting the method, performance overhead when the converted program runs is reduced, and the space memory error can be effectively detected. In addition, the availability of the program is improved by adopting an error-tolerating method, and the program is prevented from being attacked by denial of service.

Description

Technical field [0001] The invention belongs to the technical field of computer software memory security, and specifically relates to a space memory error detection method. Background technique [0002] Program memory errors are usually divided into two categories: space memory errors and time memory errors. Space memory errors include array out-of-bounds errors (such as buffer overflow), uninitialized pointer dereference, invalid type conversion errors, format string errors, and so on. Time memory errors include dangling pointer dereference, double release, invalid release, etc. Most of the memory errors exist in the C / C++ language, because according to the C / C++ language standard, array out of bounds, null pointer dereference, and reading an uninitialized variable will cause undefined behavior. The attacker can control the execution of the program by using the program's memory error. Among the top 25 most dangerous software errors published by CWE / SANS, memory errors account...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problems of high performance overhead, low compatibility, and low usability existing in the current space memory error detection method based on pointer boundaries, the purpose of the present invention is to provide a space memory error detection with low performance overhead, high compatibility, and high availability method to better and more efficiently detect memory errors that occur during the running of a program in real time, and ensure that the program can continue to run normally when a memory error occurs, preventing attackers from carrying out denial of service attacks

Images