C程序数组越界的运行时验证技术研究与实现

计算机工程与应用 ›› 2015, Vol. 51 ›› Issue (11): 190-195.

C程序数组越界的运行时验证技术研究与实现

李文明，陈哲，李绪蓉，黄志球

南京航空航天大学计算机科学与技术学院，南京 210016

出版日期:2015-06-01 发布日期:2015-06-12

Runtime verification of array bounds overflow of C programs

LI Wenming, CHEN Zhe, LI Xurong, HUANG Zhiqiu

College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 210016, China

Online:2015-06-01 Published:2015-06-12

摘要/Abstract

摘要： 缓存区溢出能引起非常严重的安全问题，对网络和分布式系统（如机群，网格，P2P系统等）构成严重威胁。数组越界在缓存区溢出中占据重要位置，如何检测数组越界错误是一个重要且极具意义的课题。针对该课题，给出一种对C语言数组越界进行运行时验证的方法。分析了数组越界的错误类型，根据这些类型分别研究了数组越界的运行时验证的思想;设计了基于程序插桩进行数组越界动态检测的算法，给出了该方法基于开源编译器Clang的具体实现;用实验证明了该方法是切实可行并且有效的。

关键词: 数组越界, 运行时验证, 程序插桩

Abstract: Buffer overflow can cause very serious security problems and bring serious threats to networks and distributed systems such as clusters, Grids, P2P systems. Array bounds overflow is an important instance of buffer overflow. How to check array bounds overflow is an important and meaningful issue. In this paper, it presents a runtime verification method for checking array bounds overflow. It analyzes the various classes of array bounds overflow errors. Based on the classification, it investigates the various verification methods. It studies the algorithms for dynamic checking of array bounds overflow based on program instrumentation, implements the algorithms based on the open source compiler Clang. The experimental results show that this method is feasible and efficient.

Key words: array bounds overflow, runtime verification, program instrumentation

李文明，陈哲，李绪蓉，黄志球. C程序数组越界的运行时验证技术研究与实现[J]. 计算机工程与应用, 2015, 51(11): 190-195.

LI Wenming, CHEN Zhe, LI Xurong, HUANG Zhiqiu. Runtime verification of array bounds overflow of C programs[J]. Computer Engineering and Applications, 2015, 51(11): 190-195.

[1]	陈宁，李星. 基于AOP架构的业务约束检测[J]. 计算机工程与应用, 2012, 48(22): 74-78.
[2]	赵鹏宇¹,李建茹²,宫云战³. Java语言中数组越界故障的静态测试研究[J]. 计算机工程与应用, 2008, 44(27): 87-90.