«上一篇/Previous Article|本期目录/Table of Contents|下一篇/Next Article»

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

期数:

2012年06期

页码:

93-96

栏目:

智能、算法、系统工程

出版日期:

1900-01-01

文章信息/Info

Title:

Research on Procedure Buffer Overflow of a CoSy C Compiler

文章编号:

1673-629X（2012）06-0093-04

作者:

史岩 李蜀瑜 丘征 陈长胜

陕西师范大学计算机科学学院

Author(s):

SHI Yah;  LI Shu-yu;  QIU Zheng;  CHEN Chang-sheng

College of Computer Science, Shaanxi Normal University

关键词:

中间表示; CoSy; 缓冲区溢出; XML

Keywords:

intermediate representation;  CoSy;  buffer overflow;  XML

分类号:

TP314

文献标志码:

A

摘要:

CoSy是ACE公司开发的编译器构架,为了保证CoSy C编译器输入程序的安全性,避免产生编译器缓冲区溢出问题,提出了编译器缓冲区溢出判断模型。根据C源程序编译器缓冲区溢出漏洞的特征,建立了编译器缓冲区溢出判断模型;给出了重建CoSy中间表示CCMIR（Common CoSy Medium-level Intermediate Representation）的方法;最后,给出了CC-MIR程序安全性判定算法。实验结果表明,这种模型可以有效地判断输入程序的安全性。因此,通过重建CCMIR模型可以有效地避免CoSy C语言编译器编译过程中的缓冲区溢出问题

Abstract:

CoSy is a compiler framework developed by ACE company. In order to ensure the security of inputted procedure of CoSy C compiler and avoiding the crisis of compiler＇s buffer overflow, model of estimating compiler＇s buffer overflow was put forward. According to analyzing the character of potential compiler＇s buffer overflow vuInerabilities in C procedure, and the model of estimating compiler ＇s buffer overflow was founded; A method of rebuilding common CoSy medium-level intermediate representation was put forward; At last, an algorithm of estimating the security of a CCMIR procedure was put forward. It is indicated that the research can satisfactorily validate the security of the inputted procedure. And this rebuilded CCMIR model can effectively avoid the CoSy C language compiler＇s buffer overflow

备注/Memo

备注/Memo:

中央高校基本科研业务费专项资金（GK201002011）史岩（1986-），男，硕士研究生，主要研究领域为Web服务李蜀瑜，副教授，博士，主要研究领域为嵌入式系统、Web服务

常用功能

更新日期/Last Update: 1900-01-01