摘要
为准确快速地找到缓冲区溢出漏洞点,提出一种通过代码插装对二进制文件中的缓冲区溢出漏洞自动定位的方法。使用PIN提供的函数编写程序分析工具,在程序执行过程中记录所需的信息。当检测到内存访问错误异常时,判别破坏内存的情况,获取内存破坏点,查找到非法写内存的指令定位漏洞。实例分析表明,该方法不需要源程序且效率较高,能成功地定位常见的缓冲区溢出漏洞。
In order to find buffer overflow vulnerability point accurately and rapidly, this paper proposes a method that can f＇md buffer overflow vulnerabilities in binary file through code instrumentation. It uses plentiful functions PIN providing to make program analysis tool and saves information needed during program execution. When detecting memory access violation exception, it distinguishes what class of memory corruption and obtains memory corruption point and seeks illegal memory writing instruction to locate vulnerability. Example analysis shows that the method does not need source program, and has higher efficiency, it can locate popular buffer overflow vulnerabilities successfully.
出处
《计算机工程》
CAS
CSCD
2012年第9期138-140,共3页
Computer Engineering
关键词
漏洞定位
代码插装
返回地址
函数指针
异常
缓冲区溢出
vulnerability location
code instrumentation
return address
function pointer
exception
buffer overflow
