拷贝构造函数和拷贝赋值运算符安全漏洞分析  

The copy structure function and the copy evaluation operator security loophole analyzes

作　　者：陈树广[1] 

机构地区：[1]西安财经学院信息学院西北工业大学软件与微电子学院,西安710061

出　　处：《电脑编程技巧与维护》2008年第11期76-77,共2页Computer Programming Skills & Maintenance

摘　　要：C/C++作为现在较为流行的开发工具,在程序开发中占有举足轻重的地位,所以研究C/C++程序的安全漏洞问题,详细地对安全漏洞进行归类并分析原因及提出相关建议是一项很必要有意义的工作。本文主要是结合AN-SIC和C++国际标准,从C/C++语言机制的多个方面粗略提出了C/C++程序中拷贝构造函数和拷贝赋值运算符的常见、典型的安全漏洞,并深入研究了C++程序中异常方面的安全漏洞。设计实例说明程序安全漏洞的存在与危害,分析实例引发漏洞的原因,并提出如何避免漏洞发生的可行性建议方案。希望以此以达到指导程序员在软件开发过程中安全地使用C/C++程序、避免可能出现的安全漏洞之目的。C/C ＋＋ took the present more popular development kit, holds the pivotal status in the procedure development, therefore studies the C/C＋＋ procedure the security loophole question, detailed carries on to the security loophole classifies and analyzes the reason and proposed the correlation suggestion is one item very essential, watershed work. The article prime task is unifies ANSIC and the C＋＋ international standard, proposed sketchily from C/C＋＋ language mechanism many aspects in the C/C＋＋ procedure saves crosses copy structure function and copy evaluation operator common, model security loophole, and has studied in thoroughly the C＋＋ procedure the unusual aspect security loophole, designs the example description program security loophole the existence and the harm, analyzes the example initiation loophole the reason, and proposed how avoids the feasible suggestion plan which the loophole occurs.The hope by this achieved instructs the programmer safely to use goal of the security loophole in the software performance history which the C/C＋＋ procedure, avoids possibly appearing.

关 键 词：安全漏洞 指针 拷贝构造函数 拷贝赋值运算符 异常 

分 类 号：TP312.1[自动化与计算机技术—计算机软件与理论]