关键词: 缓冲区溢出, 循环, 易发点, 过程间分析, 函数摘要

Abstract: For buffer overflow vulnerability caused by circulating copies of memory, this paper proposes a context-sensitive inter-process analysis and detection model. Through a series of static analysis of binary code, inter-process analysis using data provided by the inter-process analysis, it mines the buffer overflow prone points. This detection model is based on BinNavi open platform, implemented as a plug, is able to screen accurately spill-prone points and effectively reduces false and negative cases.

Key words: buffer overflow, loop, prone points, process analysis, function summary