CAJ | 학술논문

缓存区溢出能引起非常严重的安全问题，对网络和分布式系统（如机群，网格，P2P系统等）构成严重威胁。数组越界在缓存区溢出中占据重要位置，如何检测数组越界错误是一个重要且极具意义的课题。针对该课题，给出一种对C语言数组越界进行运行时验证的方法。分析了数组越界的错误类型，根据这些类型分别研究了数组越界的运行时验证的思想；设计了基于程序插桩进行数组越界动态检测的算法，给出了该方法基于开源编译器Clang的具体实现；用实验证明了该方法是切实可行并且有效的。
완존구일출능인기비상엄중적안전문제，대망락화분포식계통（여궤군，망격，P2P계통등）구성엄중위협。수조월계재완존구일출중점거중요위치，여하검측수조월계착오시일개중요차겁구의의적과제。침대해과제，급출일충대C어언수조월계진행운행시험증적방법。분석료수조월계적착오류형，근거저사류형분별연구료수조월계적운행시험증적사상；설계료기우정서삽장진행수조월계동태검측적산법，급출료해방법기우개원편역기Clang적구체실현；용실험증명료해방법시절실가행병차유효적。
Buffer overflow can cause very serious security problems and bring serious threats to networks and distributed systems such as clusters, Grids, P2P systems. Array bounds overflow is an important instance of buffer overflow. How to check array bounds overflow is an important and meaningful issue. In this paper, it presents a runtime verification method for checking array bounds overflow. It analyzes the various classes of array bounds overflow errors. Based on the classifi-cation, it investigates the various verification methods. It studies the algorithms for dynamic checking of array bounds overflow based on program instrumentation, implements the algorithms based on the open source compiler Clang. The experi-mental results show that this method is feasible and efficient.