C程序数组越界的运行时验证技术研究与实现  

Runtime verification of array bounds overflow of C programs

作　　者：李文明[1] 陈哲[1] 李绪蓉[1] 黄志球[1] 

机构地区：[1]南京航空航天大学计算机科学与技术学院,南京210016

出　　处：《计算机工程与应用》2015年第11期190-195,211,共7页Computer Engineering and Applications

基　　金：国家自然科学基金(No.61100034;No.61170043);中国博士后科学基金项目(No.20110491411;No.2012T50498);江苏省博士后科研资助计划项目(No.1101092C)

摘　　要：缓存区溢出能引起非常严重的安全问题,对网络和分布式系统(如机群,网格,P2P系统等)构成严重威胁。数组越界在缓存区溢出中占据重要位置,如何检测数组越界错误是一个重要且极具意义的课题。针对该课题,给出一种对C语言数组越界进行运行时验证的方法。分析了数组越界的错误类型,根据这些类型分别研究了数组越界的运行时验证的思想;设计了基于程序插桩进行数组越界动态检测的算法,给出了该方法基于开源编译器Clang的具体实现;用实验证明了该方法是切实可行并且有效的。Buffer overflow can cause very serious security problems and bring serious threats to networks and distributed systems such as clusters, Grids, P2 P systems. Array bounds overflow is an important instance of buffer overflow. How to check array bounds overflow is an important and meaningful issue. In this paper, it presents a runtime verification method for checking array bounds overflow. It analyzes the various classes of array bounds overflow errors. Based on the classification, it investigates the various verification methods. It studies the algorithms for dynamic checking of array bounds overflow based on program instrumentation, implements the algorithms based on the open source compiler Clang. The experimental results show that this method is feasible and efficient.

关 键 词：数组越界 运行时验证 程序插桩 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]