摘要
缓冲区溢出漏洞是当前互联网中存在的最主要的威胁之一。该文针对缓冲区溢出漏洞的产生原理,在Intel386处理器的基础上,分析了堆栈和寄存器以及程序的调用规则,并以C/C++语言为例通过反汇编详细分析了程序内存的结构和管理。
Buffer overflows are the most serious threatens to the computer security. In this paper, according to the generation principle of buffer overflow vulnerabilities, analyze the stack and register as well as the rules of program call on the basis of Intel386 CPU, take C/C++ for example, through anti-assembler analysis the structure and management of program memory in detail.
作者
杨礼波
张志亮
YANG Li-bo1, ZHANG Zhi-liang2 (1.School of Information Engineering, North China University of Water Resources and Electric Power, Zhengzhou 450011, China; 2. School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu 610054, China)
出处
《电脑知识与技术(过刊)》
2010年第17期4686-4689,共4页
Computer Knowledge and Technology
关键词
缓冲区溢出
堆栈
寄存器
函数调用
程序内存结构
buffer overflow
stack
register
function call
structure of program memory