Binary Code Defect Detection Based on Taint Pointer
Qingxian Wang · Jisuanji gongcheng · 2012
Taint pointers are serious threats to the security of data flow and control flow.A method for binary defect detection is proposed,which is based on dynamic taint propagation,dynamic symbolic execution and bound constraint analysis,including introduction of the pointer propagation rules,generation of trigger condition by combing path constraints with bound constraints.It can generate inputs for four types of code defects caused by taint pointer.Test results show that this method reduces the number of test case generation effectively,and a virtual function call hijack and two pointer memory corruption defects are found in the test of Linux system tools.