Detection method for buffer overflow of reconstructed CoSy intermediate representation

Abstract

The invention aims at providing a detection method for buffer overflow of reconstructed CoSy intermediate representation, namely a method for analyzing a source code and detecting the buffer overflow. The method comprises the steps of: (1) analyzing and scanning a source program by a CoSy compiler to generate intermediate representation CCMIR (common CoSy medium-level intermediate representation); (2) reconstructing a CCMIR text and increasing a safety attribution to a non-static-state local variable, so as to judge the buffer overflow; and (3) judging the buffer overflow of the final intermediate representation CCMIR. By the adoption of the method, the code can be rapidly reconstructed, and the reconstruction process is simple and feasible and has excellent versatility; and rapid and high-efficiency detection on the potential errors, which cause the buffer overflow, in the program can be realized after reconstruction.

Description

technical field [0001] The invention relates to a method for reconstructing an intermediate representation compiled by CoSy and performing buffer overflow detection, belonging to the technical field of information security. Background technique [0002] With the rapid development of computer technology and communication technology, the entire society relies more and more on computer technology, and all parties have higher and higher requirements for system security. However, the reality is that the security incidents of computer systems are becoming more and more serious. Among the security incidents in recent years, the security incidents related to the buffer zone exceed 50%. The buffer overflow security incidents of programs developed in C language have a high occurrence rate. C language plays an irreplaceable role in computer software development and is widely used in embedded development, system software, application software, etc., but C language itself lacks a securi...

AI Technical Summary

Problems solved by technology

[0012] The disadvantages of this method are: (1) The redundant algorithm is only for the abstract syntax tree generated by the GCC compiler, which is not universal. For the abstract syntax tree generated by other similar compilation systems, the algorithm needs to be greatly modified.

(2) Add an interval pair for each buffer, the representation method is not accurate enough, which will lead to incomplete detection

(3) The judgment method of the buffer state is not accurate enough, which will lead to inaccurate judgment results

Images