The present invention discloses a
crash analysis method and
system for binary programs, including steps: S1, information collection and
processing, in this step, the
instrumentation module performs code
instrumentation on multiple key positions and basic blocks, and then runs the program ,
record information; the taint module takes the program input as taint, tracks the spread of taint during program execution, and at the same time, performs symbolic operation on each executed instruction, and finally performs reverse slice from the
crash point according to the symbolic content ,
record information; S2, analyze based on the data processed in step S1, and obtain the program execution trajectory diagram,
stain propagation trajectory diagram and
crash causes, etc.; the present invention can analyze the program without
source code, and collect the program running
Crash information, crash
backtracking, locating the crash point, determining the cause of the crash, etc., greatly reduces the cost of manual analysis, and can assist
vulnerability analysts to quickly determine the mechanism of the program crash.