C语言内存安全性运行时验证技术综述  

Overview of C Language Memory Safety Runtime Verification Technology

作　　者：张琦 刘一辰 ZHANG Qi;LIU Yichen(College of Computer Science and Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 211106,China)

机构地区：[1]南京航空航天大学计算机科学与技术学院,江苏南京211106

出　　处：《现代信息科技》2021年第23期84-87,共4页Modern Information Technology

基　　金：国家自然科学基金:航电系统软件可靠性的形式化验证技术研究(U1533130)。

摘　　要：C语言广泛应用于嵌入式软件和系统软件的开发,它提供了更直接的底层内存控制,但却缺少对内存访问安全性的检测,导致C程序运行时可能产生内存安全性错误。当前,开发人员力求通过多种验证技术解决内存安全性错误,最常用的是运行时验证技术。文章首先对C程序常见的内存安全性错误进行分析,然后介绍几种相关的内存分析技术,最后分别对几种常用的C程序内存安全性检测工具进行介绍和比较,为接下来的研究工作提供了方向性参考。C language is widely used in the development of embedded software and system software.It provides more direct underlying memory control but lacks the detection of memory access security,which causes memory security errors when C programs are running.At present,developers strive to solve memory security errors through a variety of verification technologies,the most commonly used is runtime verification technology.This paper first analyzes common memory security errors in C programs,then introduces several related memory analysis techniques,and finally introduces and compares several commonly used C program memory security detection tools.It provides direction reference for the following research work.

关 键 词：C程序 内存错误 运行时验证 AddressSanitizer Movec 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]