Memory access instruction access detection method and device

Abstract

The invention provides an access command access detection method and device. The method includes that a CPU determines if an access of an access command is a legal access or not according to an operation type of the access command in an operation system kernel code, an address to be accessed of the access command and the state of the address to be accessed, recorded in a shadow memory page, and the CPU executes the access command if the access command is the legal command. The method can determine if the access command is the legal access command or not according to the operation type of the access command, the address to be accessed, and the state of the address to be accessed, can execute the access command if the access command is the legal command, and can avoid collapse of an operation system kernel due to the fact that the access command illegally access the kernel space, and can improve the stability of operation of a computer system.

Description

technical field [0001] The invention relates to computer technology, in particular to a memory access instruction access detection method and device. Background technique [0002] Code in an operating system can run at different privilege levels, generally divided into kernel level and user level. When the code runs at the user level, it is also called running in the user state, and when the code runs at the kernel level, it is also called running in the kernel state. When the operating system kernel code is running, it runs in the kernel state. The linear address space in a computer system is divided into user space and kernel space. The memory in user space is called user space memory, and the memory in kernel space is called kernel space memory. Kernel space memory can only be accessed by code running in kernel mode, and user space memory can be accessed by code running in kernel mode and code running in user mode. When the operating system kernel code is running, the ...

AI Technical Summary

Problems solved by technology

When the operating system kernel code is running, the memory access instructions need to access the kernel space memory. Due to the negligence in the writing process of the operating system kernel, illegal memory access may occur, which may cause the operating system kernel to crash. Therefore, how to detect the operating system The memory access instructions in the kernel code are very important to the legality of kernel space memory access

[0003] However, at present, it is impossible to detect the legitimacy of the access instruction in the operating system kernel code to the memory in the kernel space, thus, when an illegal memory access occurs, the operating system kernel crashes, affecting the normal operation of the computer system

Images