多线程C程序内存安全性动态分析方法
Dynamic Analysis Method for Memory Safety of Multithreaded C Programs
严瑞 1陈哲2
作者信息
- 1. 南京航空航天大学计算机科学与技术学院 南京 211106
- 2. 南京航空航天大学计算机科学与技术学院 南京 211106;软件新技术与产业化协同创新中心 南京 210023
- 折叠
摘要
随着软件结构越来越复杂以及其要求更高级别的并发量,出现了越来越多的多线程程序,同时C语言程序缺乏检测其内存安全的能力,进而导致C语言实现的程序可能会存在较多的隐藏漏洞,因此对多线程C程序的内存安全检测尤为的重要.较为前沿且可靠的检测内存安全的技术主要为动态分析技术,且现在对于多线程C程序内存安全检测的工具不是特别完善,错误检测不完全,性能不是很高.因此提出了基于指针的动态分析技术,同时结合无锁技术、源代码插桩技术实现了工具Movec来对多线程C程序的内存安全性进行检测,并且选取专业测试集来进行实验,验证了本工具对于多线程C程序检测内存安全是有效的,检测的错误更多且性能较为优秀.
Abstract
As software results become increasingly complex and require higher levels of concurrency,more and more multithrea-ded programs are emerging.At the same time,C language programs lack the ability to detect memory security,which may lead to more hidden vulnerabilities in C language implemented programs.Therefore,memory security detection for C language multithreaded programs is particularly important.At present,the most cutting-edge and reliable technology for detecting memory security is dynamic analysis technology,and the tools for detecting memory safety in C language multithreaded programs are not particularly perfect.Therefore,this paper proposes a pointer based dynamic analysis technology,and combines lockless technology and source code instrumentation technology to implement the tool Movec to detect the memory security of C language multi-threaded programs.And by selecting a professional test set for experiments,it is verified that this tool is effective in detecting memory security in C language multithreaded programs and has excellent performance.
关键词
多线程/内存安全/动态分析/源代码插桩Key words
Multithreading/Memory safety/Dynamic analysis/Source code instrumentation引用本文复制引用
基金项目
国家自然科学基金(62172217)
国家自然科学基金-中国民用航空总局联合资助项目(U1533130)
CCF-华为胡杨林基金形式化专项(62172217)
出版年
2024
NETL
NSTL
万方数据