C程序内存安全的运行时检测方法研究和实现

Research and Implementation of the Runtime Detecting Method of Memory Safety of C

随着软件规模的不断增大,如何保证软件的可靠性和安全性成为学术界和工业界越来越关注的问题.然而由于C语言自身缺乏边界检测的机制,使得它不能确保软件的可靠性与安全性.当前的检测方法都或多或少存在问题,如不兼容、不完整等.设计了一种完整的C程序内存安全的运行时检测方法,能确保C程序的时间内存安全和空间内存安全.本文是采用基于指针方法,并且借助开源编译器clang实现了确保C程序内存安全的运行时验证工具TASSafe.通过实验证明我们的工具是有效并且是高效的.

With the increasing of the scale of software, how to guarantee the reliability and safety of the software has become a growing concern in academia and industry. However, due to the lack of bounds checking of C language,it cant ensure the reliability and security of the software. And a variety of methods exist generally suffer from one or more drawbacks including the inability to detect all errors, the use of incompatible metadata, and so on. In this paper, a method of detecting C program memory security is designed, which can ensure the temporal and spatial of the C program. This paper uses the based-pointer method, and with the aid of the open source compiler clang, the runtime verification tool TASSafe is implemented to ensure C program memory security. Experiments show that our tool is effective and efficient.