Method and device for detecting memory access overflow

Abstract

The application discloses a method for detecting memory access overflow and a device for detecting memory access overflow. The method comprises the following steps of preprocessing source codes and analyzing a lexical structure, a grammatical structure and a semantic structure, and generating a control flow graph, a data dependence graph and an abstract syntax tree; establishing various detection models to different detection scenes, analyzing the control flow graph, the data dependence graph and the abstract syntax tree according to the various detection models, performing expression iteration, traversing state space, and outputting detection results; according to detection results, judging whether access overflow is present in source codes, and performing feedback output to detected memory access overflow. Therefore, the various detection models are defined by reviewing the control flow graph of the source codes, the data dependence graph and the abstract syntax tree, and expression iteration and state machine analysis are realized, the memory access overflow in the source codes can be fully excavated, the space and time cost for traversing the state space can be reduced, and underreporting and misinformation of the memory access overflow are reduced.

Description

technical field [0001] The present application relates to the field of computer compilation, in particular to a method and device for detecting memory access overflow. Background technique [0002] Memory access overflow is one of the root causes of vulnerabilities in C language programs. It usually manifests as key problems such as array out-of-bounds access and stack overflow. These key problems may cause the program to have unpredictable results during runtime. It may run normally or cause the program to crash, which will bring great trouble to programmers during testing. As a result, they are all due to the program not performing memory access according to ideal constraints. Therefore, how to detect and judge possible loopholes as much as possible and reduce the misjudgment rate as much as possible is a current research hotspot and difficulty. [0003] Generally speaking, memory access overflow detection is divided into two parts: static detection and dynamic detection...

AI Technical Summary

Problems solved by technology

[0004] However, in reality, the state space may be infinite due to the loop structure and jump branches, but the space and time cost of traversing the state space is unbearable, and because there are many functions and loops in the source code, the existing detection The method can handle simple loops, but cannot handle complex structures such as recursion, and it is difficult to traverse the entire state space under resource-constrained conditions, so there are high false negatives and false positives

Images