Dynamic Detection of Use-After-Free Bugs
- Авторлар: Asryan S.A.1, Gaissaryan S.S.2,3,4,5, Kurmangaleev S.F.2, Aghabalyan A.M.6, Hovsepyan N.G.6, Sargsyan S.S.6
-
Мекемелер:
- Institute of Problems in Informatics and Automation, Armenia National Academy of Sciences
- Ivannikov Institute for System Programming, Russian Academy of Sciences
- Faculty of Computational Mathematics and Cybernetics, Moscow State University
- Moscow Institute of Physics and Technology
- State University—Higher School of Economics
- Erevan State University
- Шығарылым: Том 45, № 7 (2019)
- Беттер: 365-371
- Бөлім: Article
- URL: https://journal-vniispk.ru/0361-7688/article/view/176930
- DOI: https://doi.org/10.1134/S0361768819070028
- ID: 176930
Дәйексөз келтіру
Аннотация
A novel method for detecting use-after-free bugs based on the program dynamic analysis is described. In memory unsafe programming languages, such as C or C++, this class of bugs mainly occurs when the program tries to access an area of dynamically allocated memory that has been already freed. For each program execution path, the method checks the correction of the allocation, deallocation, and access operations. Since the dynamic analysis is used, bugs can be found only in the parts of the code that was actually executed. The symbolic program execution with the help of SMT (Satisfiability Modulo Theories) solvers is used. This allows us to generate data the processing of which produces new execution paths.
Авторлар туралы
S. Asryan
Institute of Problems in Informatics and Automation, Armenia National Academy of Sciences
Хат алмасуға жауапты Автор.
Email: asryan@ispras.ru
Армения, Erevan, 0014
S. Gaissaryan
Ivannikov Institute for System Programming, Russian Academy of Sciences; Faculty of Computational Mathematics and Cybernetics, Moscow State University; Moscow Institute of Physics and Technology; State University—Higher School of Economics
Хат алмасуға жауапты Автор.
Email: ssg@ispras.ru
Ресей, Moscow, 109004; Moscow, 119991; Dolgoprudnyi, Moscow oblast, 141700; Moscow, 101000
Sh. Kurmangaleev
Ivannikov Institute for System Programming, Russian Academy of Sciences
Хат алмасуға жауапты Автор.
Email: kursh@ispras.ru
Ресей, Moscow, 109004
A. Aghabalyan
Erevan State University
Хат алмасуға жауапты Автор.
Email: anna.aghabalyan@ispras.ru
Армения, Erevan, 0025
N. Hovsepyan
Erevan State University
Хат алмасуға жауапты Автор.
Email: narekhnh@ispras.ru
Армения, Erevan, 0025
S. Sargsyan
Erevan State University
Хат алмасуға жауапты Автор.
Email: sevaksargsyan@ispras.ru
Армения, Erevan, 0025
Қосымша файлдар
