Linux上使用包裹函数防止堆栈溢出攻击的研究

Research of Using Wrapper Functions to Detect and Prevent Stack-smashing Attack on Linux

通过对C源代码的静态分析，将源代码中存在缓冲区溢出缺陷的库函数替换为增加了边界检查的包裹函数, 有效地检测和处理堆栈缓冲区溢出攻击。

This paper presents a method that statically detects C source code and substitutes bounds-checked wrapper functions for the functions that have buffer overflow vulnerabilities. In this way, it can prevent stack-smashing attack effectively.