Design and implementation of a component stack overflow vulnerability detection system
Huanhuan Wang · Journal of Shandong University · 2011
Problems with buffer overflow security exposed by the COM component are more and more widely used with COM component technology.The system CSDS(component stack overflow detecting system),which can detect buffer-overflow vulnerability of the COM component,is designed and implemented in this paper.The CSDS system contains four modules,the interface analysis module,the function position module,the stack-overflow static analysis module and the result output module.The detailed information of objects,interfaces and functions of the COM component is obtained through the interface analysis module.The linear address that the user-written function corresponded in the assembly code of the component is analyzed and obtained through the function position module.COM component assembly codes are implemented and stack-overflow vulnerability is analyzed through the stack-overflow static analysis module.Test results can be expressed by the form of XML through the result output module.The implemented prototype system CSDS has good effect on stack buffer-overflow vulnerability of the COM component.