CoSy C语言编译器程序缓冲区溢出研究  

Research on Procedure Buffer Overflow of a CoSy C Compiler

作　　者：史岩[1] 李蜀瑜[1] 丘征[1] 陈长胜[1] 

机构地区：[1]陕西师范大学计算机科学学院,陕西西安710062

出　　处：《计算机技术与发展》2012年第6期93-96,共4页Computer Technology and Development

基　　金：中央高校基本科研业务费专项资金(GK201002011)

摘　　要：CoSy是ACE公司开发的编译器构架,为了保证CoSy C编译器输入程序的安全性,避免产生编译器缓冲区溢出问题,提出了编译器缓冲区溢出判断模型。根据C源程序编译器缓冲区溢出漏洞的特征,建立了编译器缓冲区溢出判断模型;给出了重建CoSy中间表示CCMIR(Common CoSy Medium-level Intermediate Representation)的方法;最后,给出了CC-MIR程序安全性判定算法。实验结果表明,这种模型可以有效地判断输入程序的安全性。因此,通过重建CCMIR模型可以有效地避免CoSy C语言编译器编译过程中的缓冲区溢出问题。CoSy is a compiler framework developed by ACE company. In order to ensure the security of inputted procedure of CoSy C compiler and avoiding the crisis of compiler＇s buffer overflow, model of estimating compiler＇s buffer overflow was put forward. According to analyzing the character of potential compiler＇s buffer overflow vuInerabilities in C procedure, and the model of estimating compiler ＇s buffer overflow was founded; A method of rebuilding common CoSy medium-level intermediate representation was put forward; At last, an algorithm of estimating the security of a CCMIR procedure was put forward. It is indicated that the research can satisfactorily validate the security of the inputted procedure. And this rebuilded CCMIR model can effectively avoid the CoSy C language compiler＇s buffer overflow.

关 键 词：中间表示 COSY 缓冲区溢出 XML 

分 类 号：TP314[自动化与计算机技术—计算机软件与理论]