Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Int...Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Integer Checking via Buffer overflow）. Our approach includes decompile execute file to assembly language; debug the execute file step into and step out; locate the overflow points and checking buffer overflow caused by integer overflow. We have implemented our approach in three buffer overflow types： format string overflow, stack overflow and heap overflow. Experiments results show that our approach is effective and efficient. We have detected more than 5 known integer overflow vulnerabilities via buffer overflow.展开更多
采用常规可固化堵漏剂解决低压地层裂缝性漏失时会产生密度过大或承压不足的技术难题,因此研究低密度高抗压的堵漏体系具有重要意义。通过合成聚丙烯酰胺(polyacrylamide,HPAM)交联形成有机网络,并优选水泥材料形成无机网络,构建低密度...采用常规可固化堵漏剂解决低压地层裂缝性漏失时会产生密度过大或承压不足的技术难题,因此研究低密度高抗压的堵漏体系具有重要意义。通过合成聚丙烯酰胺(polyacrylamide,HPAM)交联形成有机网络,并优选水泥材料形成无机网络,构建低密度有机-无机互穿网络堵漏体系;采用模拟水驱实验、X射线衍射、扫描电子显微镜(scanning electron microscope,SEM)、高温高压(high temprature and high pressure,HTHP)堵漏模拟实验、抗压实验等分析了堵漏体系的性能和堵漏机理。结果表明,聚丙烯酰胺交联反应形成的有机网络与水泥水化形成的无机网络通过静电力和范德华力等作用可形成互穿网络体系,体系抗压达6.3 MPa,密度为1.28 g/cm^(3),固化时间实现2~5 h可控,固化前后的酸溶率分别为87.8%和63.4%,堵漏及解堵性良好。展开更多
基金Supported by the National Natural Science Foundation of China （60903188）, Shanghai Education Commission Innovation Foundation （11YZ192） and World Expo Science and Technology Special Fund of Shanghai Science and Technology Commission （08dz0580202）.
文摘Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Integer Checking via Buffer overflow）. Our approach includes decompile execute file to assembly language; debug the execute file step into and step out; locate the overflow points and checking buffer overflow caused by integer overflow. We have implemented our approach in three buffer overflow types： format string overflow, stack overflow and heap overflow. Experiments results show that our approach is effective and efficient. We have detected more than 5 known integer overflow vulnerabilities via buffer overflow.
文摘采用常规可固化堵漏剂解决低压地层裂缝性漏失时会产生密度过大或承压不足的技术难题,因此研究低密度高抗压的堵漏体系具有重要意义。通过合成聚丙烯酰胺(polyacrylamide,HPAM)交联形成有机网络,并优选水泥材料形成无机网络,构建低密度有机-无机互穿网络堵漏体系;采用模拟水驱实验、X射线衍射、扫描电子显微镜(scanning electron microscope,SEM)、高温高压(high temprature and high pressure,HTHP)堵漏模拟实验、抗压实验等分析了堵漏体系的性能和堵漏机理。结果表明,聚丙烯酰胺交联反应形成的有机网络与水泥水化形成的无机网络通过静电力和范德华力等作用可形成互穿网络体系,体系抗压达6.3 MPa,密度为1.28 g/cm^(3),固化时间实现2~5 h可控,固化前后的酸溶率分别为87.8%和63.4%,堵漏及解堵性良好。
