CAJ | 학술논문

分析了Linux 内核模块特点，针对内核模块中二进制指令执行时带来的访存错误，设计了一种针对内核模块的静态检测方法。通过模拟内核模块中指令的执行，并比较访存指令请求与相关内存区域信息，静态检测方法目标是找出代码对内存的非法访问，并对可疑的访存行为发出警告。针对 ARM 处理器平台，给出了静态检测方法的具体实现，并对内核模块中的访存错误就行了检测验证。实验表明，静态检测方法能够有效找出包括地址越界访问、读未初始化内存、访问已释放内存等访存错误，本文的静态检测方法达到了预期的检测效果。
분석료Linux 내핵모괴특점，침대내핵모괴중이진제지령집행시대래적방존착오，설계료일충침대내핵모괴적정태검측방법。통과모의내핵모괴중지령적집행，병비교방존지령청구여상관내존구역신식，정태검측방법목표시조출대마대내존적비법방문，병대가의적방존행위발출경고。침대 ARM 처리기평태，급출료정태검측방법적구체실현，병대내핵모괴중적방존착오취행료검측험증。실험표명，정태검측방법능구유효조출포괄지지월계방문、독미초시화내존、방문이석방내존등방존착오，본문적정태검측방법체도료예기적검측효과。
This paper studies the memory access characteristics of Linux kernel module, and then suggests a static approach to detect memory access errors when running the code inside kernel module. Through simulation of instructions inside kernel module and comparison between access request and record of memory region, our suggested method is able to find a variety of memory access errors, such as overflow, accessing arbitrary address, invalid pointer, which are the most common threats. At last, based on ARM Processor platform, we give an implementation of our method for detecting errors induced by kernel module, and the experiment result shows it can efficiently work as we expect.