Musl libc库的堆内存漏洞安全研究  

Security Research on Heap Memory Vulnerabilities in the Musl libc Library

作　　者：罗治祥 李乐言 赖怡聪 向栖 Luo Zhixiang;Li Leyan;Lai Yicong;Xiang Xi(Fifth Research Institute of Ministry of Industry and Information Technology,Guangzhou,Guangdong 511370,China;Software College of Northeastern University;Key Laboratory of Intelligent Product Quality Evaluation and Reliability Assurance Technology,Ministry of Industry and Information Technology)

机构地区：[1]工业和信息化部电子第五研究所,广东广州511370 [2]东北大学软件学院 [3]智能产品质量评价与可靠性保障技术工业和信息化部重点实验室

出　　处：《计算机时代》2025年第1期26-31,共6页Computer Era

摘　　要：针对万物互联时代下嵌入式系统的C基础库Musl libc研究稀缺,缺乏有效整理和总结的问题,围绕Musl libc库的堆内存管理机制,详细分析了早期版本Oldmalloc堆管理器和现今版本Mallocng堆管理器的堆内存管理差异及其对安全性的影响。揭示了几种关键的安全漏洞,包括UAF、堆溢出等,并展示了如何通过这些漏洞劫持程序来控制流程。这些研究结果可为Musl libc使用者提供重要的安全指导,可为一般的堆内存漏洞攻防利用提供参考。此外,本文还讨论了潜在的防御措施,以减轻或缓解此类漏洞的影响。In the era of the Internet of Everything,there is a scarcity of research on the C standard library Musl libc for embedded systems,and the lack of effective organization and summarization.This paper focuses on the heap memory management mechanisms of Musl libc,providing a detailed analysis of the differences between the early version Oldmalloc heap manager and the current version Mallocng heap manager,Several key security vulnerabilities are revealed,including UAFs,heap overflows,etc.,and it is shown how processes can be controlled by hijacking programs through these vulnerabilities.These research results not only provide important security guidance for Musl libc users but also offer a reference for general heap memory vulnerability exploitation and defense.Additionally,this paper discusses potential defenses to mitigate or alleviate the impact of such vulnerabilities.

关 键 词：Musl libc 万物互联 嵌入式系统 堆内存管理 漏洞攻防 UAF 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]