Heap object Use-Afer-Free vulnerability detection method based on identifier consistency

Abstract

The invention discloses a heap object Use-Ater-Free vulnerability detection method based on identifier consistency, which takes a source code of a C / C + + program as an input and takes a detected heapobject Use-Ater-Free vulnerability as an output. The method comprises the steps that firstly, static analysis is conducted on an input program, and code positions of heap object distribution, pointerpropagation and pointer dereferencing are found; thereafter, code instrumentation is performed on the program at these code locations to specify the same unique identifier for each assigned heap object and all pointers pointing to the object; and finally, the program subjected instrumentation is run, and an instrumentation code is executed in the program running process to compare whether the identifier of the pointer is matched with the identifier of the object actually pointed by the pointer or not, thereby judging whether a vulnerability exists or not. The method provided by the inventionhas the advantages of effectiveness and high efficiency, and can detect the heap object Use-After-Free vulnerability with lower performance overhead and memory overhead.

Description

technical field [0001] The invention belongs to the field of program analysis and testing, in particular to a heap object Use-After-Free vulnerability detection method based on identifier consistency. Background technique [0002] Low-level languages ​​such as C and C++ provide low-level management of heap memory, and developers can flexibly allocate and release heap objects on heap memory. Due to the flexibility and efficiency of C and C++ languages, a large number of system programs, such as browsers, databases, servers, etc., are developed using C and C++ languages ​​and are widely used in daily life. However, with the expansion of the program scale and the development of modular ideas, it is difficult for developers to allocate and release heap objects correctly all the time. Therefore, programs developed in C and C++ are prone to timing errors such as Use-After-Free vulnerabilities, which have become an important reason for insecurity in modern software systems. A res...

AI Technical Summary

Problems solved by technology

For prediction-based dynamic detection methods, they are only suitable for detecting concurrent Use-After-Free vulnerabilities of multi-threaded programs, and cannot detect Use-After-Free vulnerabilities within a single thread of sequential programs and multi-threaded programs

Therefore, there is still a lack of a dynamic method that can effectively detect the use-after-free vulnerability of heap objects in C / C++ programs without being affected by memory reuse.

Images