151 results about "Function pointer" patented technology

Methods are disclosed for improving security of computer software and preventing potential attackers from gaining control of computer software via function pointer overwrite attacks. One or more additional layers of complexity may be imposed that would have to be circumvented in order to gain execution control over portions of software. One or more function pointers can be encoded using a value that may be generated on program initialization and decoded before any dynamic function call occurs. In the event of memory corruption that affects an encoded function pointer, the value will cause the destination of the function pointer to decode to an invalid and random address and will induce an error. An application may be prevented from calling an attacker corrupted function pointer by introducing various checks around the call point at compile time that check the validity of the destination to which the function pointer points.

A method, a computer program product, and a system for generating and applying patches to a computer program concurrently with its execution. It provides full support for function pointers, transparent to the programmer and nearly transparent to the concurrent loader. A reference to a function pointer is translated into a sequence of processor instructions called function descriptor instead of translating it into an address. The purpose of the function descriptor is to jump to the memory location of the sequence of instructions generated by the compiler for the procedure referenced by the function pointer. The function descriptor is masked as a static data variable and therefore preserved during the application of a concurrent patch. The address for the jump to the procedure is updated by the regular relocation process during the application of a concurrent patch.

The invention discloses a function call method and device. The method comprises the steps of running an injected logical function in an application for testing or secondary development of the application. In the process of running the logical function, if it is necessary to call an objective function not derived in the dynamic link library of the application, operation is injected into the application to obtain an offset address function which is address offset, so as to analyze the objective offset address of the objective function relative to the dynamic link library at the current moment; according to the objective offset address, the operation is injected into a pointer generation function in the application to determine the function pointer required to call the objective function. The scheme can reduce the complexity of calling underived functions and improve convenience and flexibility of calling the underived functions in the process of performance test or secondary development of an application.

The invention discloses a defense method for kernel-level return-oriented rootkits, which mainly solves the problem of incapability of defending the latest kernel-level return-oriented rootkits attack in the prior art. The method comprises the following implementation steps of: distributing an index for each piece of control data by a compiler and converting a related instruction so as not to directly use the control data during program skip but search a certain skip table by using the index distributed by the compiler to obtain a really effective skip address to indirectly perform; and then collecting all effective skip addresses, namely control data, in a system to a function pointer table and returning to an address table for protection. By adopting the method, a second step of conducting attack cannot be finished by the kernel-level return-oriented rootkits, namely the original execution flow of the system is required to be changed by rewriting a certain piece of control data, and the method can be used for protecting safety of an operating system.

A kind of method of the dynamic chain joint function library sharing the static chain joint function with the main application program and the main application program chains a static chain function library and then establish a function pointer variable and a variable pointer variable of the static chain function library by the dynamic chain joint function library; and then transfer the function section calling from the static chain function library in the dynamic chain joint function library program code into the function pointer variable; then transfer the variable section calling from the static chain function library in the dynamic chain joint function library program code into the variable pointer variable; at last compile the main application program and the dynamic chain joint program code to the function library individually among them the related function of dynamic chain joint function library and the variable has been replaced by the way of pointer and then load the dynamic chain joint function library in the main application program at the same time deliver the storage location of function and variable to the dynamic chain joint function library which makes the function and variable section called to the static chain joint function library form the dynamic chain joint function library could share the static chain joint function library connected by the main application program.

The utility model relates to a method that a mobile phone is compatible with different display devices, which comprises the following steps: Step 1. a standard series number list is compiled for a LCD device; Step 2. relevant driving motions of LCD are defined to be a uniform dynamic function pointer; Step 3. a space is cultivated inside the flash disk of the mobile phone to store condition codes; Step 4. a condition code is written into the fixed storage space inside the flash disk of the mobile phone; Step 5. after the mobile is equipped with batteries and switched on, a condition code is released from the fixed location inside the flash disk that is cultivated in Step 3; by matching with the standard series number list, a corresponding LCD device driving function can be found and the function pointer points to the corresponding driving function; Step 6. the LCD device is initialized by the driving function and displaying of the LCD device is controlled properly by operation of the driving core of the LCD device. The utility model has the advantages that the method can download fixed program into the mobile phones, which improves efficiency of development and production for mobile phones largely and saves cost as well as time.

A system for providing a graphics tool access to a computer graphics system to evaluate and control a graphics application executing on the computer graphics system. The system includes application program interface (API) event generators for performing predetermined operations relating to a graphics library function call and for generating a hook event containing results of the predetermined operations; dispatch table manger for selecting an active dispatch table from a normal operations dispatch table having function pointer to the graphics library functions and a hooks dispatch table having pointer to the API event generators; and hook event manager for enabling and configuring selected ones of the API event generators in response to a graphics tool event request. The system further includes internal event generators, integrated along various locations of a graphics pipeline managed by the graphics library, for performing predetermined diagnostic operations in the graphics system. In this embodiment the hook event manager also enables and configures selected ones of the internal event generators.

The invention provides a covering film intelligent card with extended functions, and relates to the technical field of an intelligent card. The covering film intelligent card comprises a read-only memory, a random access memory and a nonvolatile erasable memory. An operating system of the read-only memory comprises a main process, an application command processing unit and a performance function unit. The random access memory comprises variable data. The nonvolatile erasable memory comprises modifiable user data. Structural characteristics of the covering film intelligent card are that the nonvolatile erasable memory also comprises a performance function pointer table, an application command function pointer table, a patch function unit, an additionally arranged command function pointer table and an additionally arranged application command function unit. The operating system of the read-only memory acquires a function pointer via inquiring the performance function pointer table, the application command function pointer table and the additionally arranged command function pointer table, and a function is scheduled in a function pointer mode so that functions of the intelligent card are realized. The covering film intelligent card can be applied to function restoration and expansion of new functions of the intelligent card after film covering so that the covering film intelligent card has characteristics of being simple in structure, small in space occupation and high in execution speed.

The invention discloses a method and device for acquiring a webpage address. The method comprises the following steps of: initializing a browser embedded insert preliminarily embedded in a browser, and registering a callback function pointer of the browser embedded insert in the browser in the process of initializing the browser embedded insert; when the browser triggers an operation event corresponding to an opened webpage every time, writing a webpage address quoted or skipped by the operation event into a corresponding parameter of a callback function through calling the callback function pointed by the callback function pointer by the browser, and analyzing the callback function through the browser embedded insert and recording an analysis result until the analysis result meets a preset ending condition, wherein the analysis result comprises the webpage address triggered every time and quoted or skipped by the operation event corresponding to the opened webpage and a recursion call relationship among webpage addresses recorded many times. By using the method and device for acquiring the webpage address in the invention, the cost for acquiring the webpage address is reduced, and the efficiency of acquiring the webpage address is increased.

A technique to simplify L2CAP channel creation/configuration for a node is presented. The method enables a node to determine how involved it is in the L2CAP channel connection creation and management process. There are three levels of participation that the node may specify. The three levels are no involvement at all, minimal involvement, and total involvement. In no involvement, the channel is dropped if a remote node does not accept all node specified parameters. In minimal involvement, the channel is dropped if a remote node does not accept all node specified parameters and the node is notified when the connection has been disconnected by a remote disconnect or HCI link loss. In the total involvement level, the node is fully involved in the channel creation/configuration. The node provides a function pointer that is called to confirm or reject parameters. If a parameter is unacceptable, the connection is disconnected.

This invention relats to a method for realizing switch of double-protocol stack by a network card including: 1, interruption process means to alter an interrupt function pointer to be connected to the interrupt process function of a new protocol stack, 2, distribution and releasing of EMS memory is to exchange memory in a buffer region including release of memory of a received buffer region of a protocol stack before switch and application for distribution of memory of the protocol stack after switch and writes the address into a descriptor of the received buffer region, 3, mode of connection is to judge if the current set-up mode of connection satisfies communication of the switched protocol stack when switching, if so, the current mode is kept, if not, new connection is set up again, thus, only different points in the switch key points are switched in each time of switch.

The embodiment of the invention discloses a method and device for implementing undo and/or redo. The method comprises the following steps: establishing a container containing an undo queue and/or a redo queue, wherein the undo queue and/or the redo queue are/is used for accommodating one or more objects of a template class, and the template class contains the UNION of functional pointers related to operation to be undone and/or to be redid and related function call information; establishing the corresponding object of the template class based on the operation executed by a user, and putting the established object of the template class in the corresponding undo queue and/or redo queue in the container; when the user triggers an undo action and/or an redo action, popping the corresponding object of the template class from the undo queue and/or the redo queue, and utilizing the call information in the object of the template class to execute functions of the functional pointers in the object of the template class. By adoption of the template class as an operator of undo and/or redo, various types of classes can be accommodated, and data operation is not involved, so that the method is suitable for various application environments.

The invention relates to a security defense method and device of the Android privilege escalation attacks based on integrity verifications. The method comprises the steps that the case that whether or not an application program is executing the system calls associated with sensitive kernel functions is detected in real time; integrity verifications are conducted on the sensitive kernel functions to be executed by the system calls; the accuracy and reliability of the kernel function pointer corresponding to the sensitive kernel functions are examined; the case that whether or not the internal storage pointed by the kernel function pointers has the commands for the privilege escalation attack features is evaluated; the detected application privilege escalation attacks are given warnings and blocked. According to the security defense method and device of the Android privilege escalation attacks based on integrity verifications, the privilege escalation attack behaviors of malicious programs are detected in real time and are given warnings and blocked, and the damages caused by attacks on the Android system are prevented, and the securities of the application and data are effectively protected. The security defense method and device of the Android privilege escalation attacks based on integrity verifications reduce security threats brought to the Android system by the privilege escalation vulnerabilities, and enhance the security of the Android system.

A method for sharing static link codes by software components in a dynamic link library (DLL) and a main program. First, the main program links to a static link library (SLL) and creates function pointers and variable pointers in the DLLs corresponding to the SLL. Next, the functions of a DLL program code associated with calling the SLL are changed into corresponding function pointers. Next, the variables of the DLL program code associated with calling the SLL are changed into corresponding variable pointers. Finally, the main program and the DLLs are compiled into the respective program codes, wherein the functions and variables associated with a DLL are obtained via the pointers. When the DLL is loaded in the main program, the memory addresses of the functions and variables for calling and corresponding to the SLL are passed to the DLL to share the static link codes with the main program.

The invention discloses a static function call graph construction method suitable for a virtual function and a function pointer. The static function call graph construction method comprises the following steps: 1, obtaining an intermediate code of a source program; 2, obtaining key information in the intermediate code, wherein the key information comprises a basic block sequence queue and virtualfunction related information; 3, performing simulation execution on the intermediate code based on the key information, analyzing an actual function called by a function calling instruction in the intermediate code, and recording a function calling relation; and 4, constructing a static function call graph according to the function call relationship. According to the method, the virtual function,the function pointer calling and the thread creation relationship can be comprehensively analyzed, and the complex function pointer calling can be accurately analyzed, so that program developers can be better helped to understand programs, and meanwhile, the accuracy of a static analysis method depending on a function calling graph is improved.

The invention provides an inaccessible function call path detection method in a complex system. The method comprises the steps that 1, function pointer processing is carried out for a source code to distinguish declaration, evaluation and use of a function pointer; 2, the source code processed through the function pointer generates an intermediate code of the source code, wherein the intermediate code comprises multiple function units, each function unit uses a function as a basic processing unit, each function unit comprises at least one basic code block, and data flow information in each basic code block and control flow information among the basic code blocks are extracted and stored in a json file; 3, whether a branch node in the control flow information has the certain direction or not is judged so as to carry out inaccessible control flow detection.

A method and system for tracking and selecting optimal power conserving modes of a PCD includes detecting enablement or disablement of a reduced power mode and detecting one of a new and a change in a latency restriction. Next, a low power mode which has a minimum entry and exit latency may be identified. Then, it may be determined if a lowest latency restriction is less than the minimum entry and exit latency. A function pointer may be adjusted based on the output of the determining step. The function pointer may reference a halt state and a reduced power state for the PCD. Then, conditions favorable for at least one of an idle state and a reduced power mode of the PCD may be assessed. If conditions are favorable for an idle state or a reduced power mode for the PCD, then status of the function pointer may be read.