229 results about "Crash" patented technology

A method to circumvent malicious software via a system configured to bypass a device driver stack and, consequently, also bypass the malicious software that may be adversely affecting the device driver stack by using an alternative stack such as a crash dump I/O stack. The crash dump I/O stack is poorly documented relative to the device driver stack and functions independently from the device driver stack.

A booting method capable of executing a warm boot or a cold boot when a CPU crash occurs in a computer system having a CPU and a memory. First, when the CPU is in a crash state, it is detected that a user wants to execute a hardware reset function or a software reset function. Next, a hardware reset operation is executed to reboot the CPU. Then, when the user chooses to execute the hardware reset function, data and predefined values of the memory are deleted to make the computer system return to a default state. Thereafter, when the user chooses to execute the software reset function, the hardware reset operation is regarded as an operation to replace a software reset operation, and the computer system holds the data and predefined values to make the computer system return to a setting state before the computer system is crashed.

The invention provides a recovery method and apparatus for business data after application crash. The method comprises: when application crash occurs, intercepting an exception to generate a crash information file; storing the crash information file in a local storage device; ending and restarting the application; and according to the crash information file stored in the local storage device, recovering the application to be in a state before crash. Through the recovery method and apparatus for the business data after the application crash, provided by the invention, when the application crash occurs, user data can be effectively and timely recovered, so that an original business operation process is not interrupted and the data loss caused by crash is reduced.

A system and method predicts events in a computer system. The system and method includes a controller that receives a crash profile. The controller generates granular information that identifies data indicative of a potential server cluster failure in an enterprise system without needing to identify an originating cause of the potential server cluster failure. The system and method trains a model by sampling portions of a profile that may include directives and data indicative of a normal operating state and a conditioned preamble operating state. The system and method provides a trained model to a prediction engine. The system and method modifies an allocation of computing resources in response to the prediction of the potential server cluster failure by the prediction engine monitoring one or more servers of a server cluster.

The invention discloses a crash log processing method and device, equipment and a storage medium. The method comprises the steps of obtaining a crash log generated in a process that a target user usesa target application client; obtaining a symbol file matched with the version information of the target application program client; performing entry splitting on the crash log to obtain at least onecrash log single entry; obtaining an actual crash address and a crash base address corresponding to the at least one crash log single entry; analyzing the symbol file to obtain a symbol table matchedwith the target application program client and attribute record format debugging information; and outputting a symbolization analysis result of the crash log according to the actual crash address andthe crash base address corresponding to the single entry of each crash log, and the symbol table and the attribute record format debugging information matched with the target application client. According to the embodiment of the invention, the function symbol analysis can be accurately carried out on the crash log on the server of the Linux system.

Malware analysis and root-cause analysis, and information security insights based on Operating System sampled data. Sampled data includes structured logs, Operating System Snapshots, programs and/or processes and/or kernel crashes, crash dumps, memory dumps, stackshots, simulated crashes or samples. The sampled data contains payload for extraction for the purpose of detection, evaluation and reproduction of threats, infection vector, threat actors and persistence methods in the form of backdoors or Trojans or exploitable vulnerabilities used for initial infiltration or lateral movement.

Methods and apparatuses for malware analysis and root-cause analysis, and information security insights based on Operating System sampled data such as structured logs, Operating System Snapshots, programs and/or processes and/or kernel crash dumps or samples containing payload for extraction for the purpose of detection and evaluation of threats, infection vector, threat actors and persistence methods in the form of backdoors or Trojans or unknown exploitable vulnerabilities used.

Some embodiments described herein are directed to memory page or bad block monitoring and retirement algorithms, systems and methods for random access memory (RAM). Reliability issues or errors can be detected for multiple memory pages using one or more retirement criterion. In some embodiments, when reliability errors are detected, it may be desired to remove such pages from operation before they create a more serious problem, such as a computer crash. Thus, bad block retirement and replacement mechanisms are described herein.

The invention discloses a multi-core interaction method and system suitable for a nonvolatile memory and a storage medium. The system comprises an interaction request submitting module, an interactionrequest scheduling module, a kernel thread management module, a CPU load detection module and a system crash recovery module. According to the method, an interaction request environment is initialized through an interaction request submitting module, then batch interaction requests are optimized and distributed through an interaction request scheduling module, and then kernel threads are distributed to each CPU through a kernel thread management module. According to the method, batch interaction requests are processed, the advantages of multi-core asynchronous concurrent processing can be brought into full play, the efficiency is high, and the concurrency is high; besides, the load condition of each CPU can be acquired in real time through the CPU load detection module, and the system data can be recovered through the system crash recovery module, so that the stability of the system is improved, and the method and system can be widely applied to the technical field of computers.

Embodiments of the invention disclose an application crash protection method and apparatus, a device and a storage medium. The method comprises the steps of in a using process of an application, if acurrent object cannot identify the current method, creating a crash protection processing object, and dynamically adding the current method for the created crash protection processing object; and controlling the crash protection processing object to execute the added method. According to the technical scheme provided by the method and the apparatus, when the current object cannot identify the current method, the crash protection object executes the method by dynamically adding the current method to the crash protection object, so that the phenomenon of application crash caused by the fact thatthe current object cannot identify the current method can be avoided, the product robustness and stability and the user experience are improved, and the code conciseness is kept.

The invention discloses a system and a method for realizing automatic restart recovery of crash of an RK3399 mainboard which belongs to the technical field of electronics. The technical problem to besolved by the invention is how to enable a main control chip RK3399 to be automatically restarted to recover normal work when crash occurs without manual intervention. According to the technical scheme, the system comprises the main control chip RK3399, a micro control unit MCU, a power management unit PMU and a logic circuit; the main control chip RK3399 is used for communicating with the micro control unit MCU; the micro control unit MCU is used for communicating with the main control chip RK3399, judging the running state of the main control chip RK3399 and selecting whether to send a control signal to the logic circuit or not; the power management unit PMU is used for providing power for the main control chip RK3399, so that the main control chip RK3399 works normally; and the logic circuit is used for converting a control signal sent by the MCU into an RESET reset signal of the PMU to reset the PMU, so that the main control chip RK3399 is restarted. The invention also discloses amethod for realizing the automatic restart recovery of the crash of the RK3399 mainboard.

The invention discloses an application restoration method and device, a terminal and a storage medium. The method comprises the steps that restoration operation selected by a user in a predetermined interface of an application is received, wherein the restoration operation comprises at least one of file saving, program restoration and restoration operation execution. The application is provided with the predetermined interface, and the predetermined interface can be displayed when the application is rebooted after crash; and after the predetermined interface receives the restoration operationselected by the user, the corresponding restoration operation can be executed. In this way, the user autonomously selects a restoration process which the user hopes to execute, the user obtains betterrestoration experience, and the problems that in the prior art, crash only can be processed by rebooting the application or reinstalling the application, and restoration cannot be performed accordingto the actual demand of the user are solved.

The embodiment of the invention provides an application test method and device. The method comprises the following steps: based on a historical crash log, obtaining at least one tested crash operationpath; analyzing at least one tested crash operation path, and obtaining crash characteristic attributes; according to the crash characteristic attributes, predicting an operation test path easy to becrashed; and testing by adopting a way that the operation test path is tested preferentially. The technical scheme provided by the embodiment of the invention can enable application crashes to be more easily caused during automated testing, and recurrence rate of a crash scene is also improved.

The embodiment of the invention provides an application program starting method and device, electronic equipment and a storage medium, and the method comprises the steps: firstly judging whether a preset condition for starting a target process for loading an auxiliary executable file is met or not in the application program starting process; If yes, starting a process as a target process; Loadingan auxiliary executable file of the application program by utilizing the target process; And finally, after the auxiliary executable file is loaded, starting a main process of the application program,and executing service logic except for loading the auxiliary executable file by utilizing the main process to complete the starting of the application program. Wherein the auxiliary executable filesare executable files except the main executable file in all the executable files corresponding to the application program. Compared with the prior art, the scheme provided by the embodiment of the invention has the advantage that the phenomenon of system crash caused by the fact that data and resources required when a main process executes other service logics except for loading an auxiliary executable file are not loaded can be avoided.

The invention provides a method and device for avoiding application crash. The method comprises the steps of starting an application; When the application program crashes in the running process, obtaining function calling information generated when the application program crashes; Determining a target service component causing the application program to crash according to the function calling information, the target service component being a value-added service component included in the application program; Recording the identification information of the target service component in a running configuration file of the application program, so that the target service component is not executed according to the identification information recorded in the running configuration file after the application program is restarted; And restarting the application program. According to the scheme, the user experience can be improved.

The invention provides a method and device for obtaining process crash information, a medium and electronic equipment. The method comprises the steps of obtaining first process parameter information sent by a first process after crash; generating a first process injection instruction based on the first process parameter information; and obtaining crash information of the first process according tothe first process injection instruction. According to the method, instruction injection is carried out on the first process through the dump process, and the crash information is obtained, and information before and after process operation when the first process crashes can be obtained from the crash information, and the crash problem is conveniently positioned. By comprehensively analyzing the crash information of the first process, the crash reason of the crash of the first process can be obtained. The problem that process crash cannot be analyzed due to the fact that a core dump mechanismdoes not exist is solved, and the problem of system crash is further solved.

The invention relates to a high-reliability embedded software upgrading method and system, and the system comprises: a management controller which is used for configuring an internal data path; a DSPwhich is used for storing an application program and automatically loading and running the application program from the program memory through a data interface; an FPGA which is matched with the DSP to carry out interface control; a DSP FLASH which is used for storing an application program used by the DSP, wherein the backup FLASH is used for storing an application program of the DSP when a product leaves a factory; an FPGA FLASH which is used for storing a configuration program used by the FPGA, wherein the backup FLASH is used for storing a DSP application program and an FPGA configurationprogram when a product leaves a factory; in the DSP FLASH and the FPGA FLASH, a program effective mark in the current FLASH is stored in a user specified address behind a program storage space. According to the invention, when abnormal conditions such as power failure, crash, misoperation and the like occur in a program updating process, system crash caused by destroying an original version program can be avoided.

The embodiment of the invention discloses an application abnormal data acquisition method and device, computer equipment and a storage medium, and relates to the field of block chains. The method comprises the steps that user behavior data of a user in the application program using process are collected; if the application program is detected to be abnormal, the user behavior data of the user arestored into a preset record file; if the user starts the application program, whether a crash log file of the application program exists in a preset file directory or not is judged; and if so, uploading the record file and the crash log file to a preset server, so that a developer can clearly understand which operation causes the application program to be abnormal after the user executes the operation through the record file, and the developer can conveniently and quickly find out a reason for the application program to be abnormal. And the exception repairing efficiency of developers is improved. And the record file and the crash log file are uploaded to a blockchain to ensure the security and non-tampering performance of the data.

The invention discloses a method and device for determining memory exception, equipment and a storage medium. The method comprises the steps that log information uploaded by an application program isreceived, and the log information comprises a page when the application program crashes and two or more kinds of memory information before the application program crashes; according to the two or morethan two kinds of memory information, that a memory exception exists before the application program crashes is identified; it is determined that crash is caused by memory exception when the application program applies for the memory in the skip page,. By means of the method, comprehensive information generated, when each memory exception possibly causing system crash occurs, is collected, and thememory exception causing system crash can be judged according to the comprehensive information.

The invention provides a crash log processing method and device, electronic equipment and a storage medium. The method comprises the steps of obtaining addresses of all classes in an executable file corresponding to a crash log file; obtaining an address range of each function of each class according to the address of each class; and for any crash log in the crash log file, in response to the situation that the crash address corresponding to the crash log is located in the address range of any function, determining that the function crashes; and searching a function address interval to which the crash address belongs by scanning the feasibility file and comparing the assembly instruction, and confirming the crash function, thereby converting the crash address into a function symbol and symbolizing the log. The method has the beneficial effects that the crash log can still be symbolized under the condition that the symbol table is missing, the blind area of program monitoring is reduced, and the feasibility and adaptability of crash log symbolization are improved.

The invention discloses an efficient method and device for judging reuse vulnerability after software program release. The method mainly comprises the following steps: (1) enabling a program to crashin a running process by utilizing a known vulnerability triggering sample, and recording all executed instructions from the start of running of the program to the occurrence of crash; (2) recording all heap management operation behaviors in real time according to a calling condition of a system function in a program running process; (3) adopting a reverse dynamic taint propagation technology, andperforming forward backtracking on a propagation instruction set related to the crash instruction from the time when the program crashes; and (4) carrying out association analysis, finding out an object assignment moment related to the crash instruction, finding out a corresponding object allocation and release period on the basis of the object assignment moment, further judging whether the objectis released when crash occurs, and if yes, indicating that a reuse vulnerability after release exists. According to the method, the detection and protection capability of the released reuse vulnerability in the actual environment can be improved.

The invention discloses a software analysis method and system based on dynamic instrumentation. The method comprises the steps of obtaining test sample data and a to-be-tested program; performing structural analysis and machine code translation on the to-be-tested program to obtain an instruction sequence, determining at least one breakpoint according to the granularity of a basic block in the instruction sequence, and determining an instrumentation instruction corresponding to each breakpoint; taking the test sample data as input data of the to-be-tested program, executing the to-be-tested program, monitoring breakpoints in the to-be-tested program, and obtaining and storing execution path information and crash information; determining a coverage rate of the basic block according to the execution path information, determining a crash sample according to the crash information, screening according to different execution paths corresponding to the crash sample, and determining a unique crash sample; and determining a security evaluation result of the to-be-tested program according to the coverage rate of the basic block and the number of the unique crash samples.

The invention discloses a method and device for obtaining crash information of an application program, and relates to the technical field of computers. A specific embodiment of the method comprises the steps of monitoring a storage position of a memory mirror image file which should be generated when an application program crashes; when the memory mirror image file is created or updated, obtainingcreated or updated time information; determining crash information of the application program in the time period according to the time information in the preset time period; wherein the name of the memory mirror image file is preset to be uniquely determined by the name of the application program. According to the embodiment, the size of the memory mirror image file generated by the application program can be limited on the premise of ensuring application program crash information acquisition and crash reason positioning, and high availability of the system is realized.

The embodiment of the invention discloses a kernel crash recovery method and device, equipment and a storage medium, and the method comprises the steps that: when a main kernel crashes, the main kernel controls a processor to store the context of a normal thread which is being executed; after the context of the normal thread is stored, the main kernel initializes a loaded standby kernel in a first memory area, wherein the first memory area is a memory area reserved by the main kernel in a physical memory; after initialization is completed, the standby kernel obtains the context of the normal thread by accessing the kernel data structure of the main kernel; and the standby kernel recovers the running states of all the processes according to the context of the normal thread. In the embodiment of the invention, the standby kernel is directly started after the main kernel crashes in a mode of switching the main kernel and the standby kernel, and the whole operating system does not need to be restarted by executing a BIOS program, so that the system recovery time can be saved, and the data loss is avoided.