Process Analysis of Buffer Overflow Based on Dynamic Binary Platform
Fei Kang, Pengcheng Dong, Hui Shu, Jing Sun · 2012
Based on dynamic binary platform, an analysis method for buffer overflow is described in detail and a prototype system is implemented.Overflow detection based on exception capture, control flow analysis, and memory status checks is implemented according to the principle of buffer overflow exploits.By monitoring memory read and write instructions, control transfer instructions, system obtains call sequences and data transfer flow.Through analysis of memory data and function calls, we locate code lead to overflow.Experimental results show that the system can detect overflow, and accurately position code segment which results in buffer overflow.The prototype system is of important value in efficient analysis of 0day and rapid patching software.