会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明申请
    • Using Virtual Table Protections to Prevent the Exploitation of Object Corruption Vulnerabilities
    • 使用虚拟表格保护来防止对象损坏漏洞利用
    • US20120144480A1
    • 2012-06-07
    • US12958668
    • 2010-12-02
    • Matthew R. MillerKenneth D. Johnson
    • Matthew R. MillerKenneth D. Johnson
    • G06F21/00
    • G06F21/6218G06F2221/2143
    • The subject disclosure is directed towards preventing the exploitation by malicious code of object state corruption vulnerabilities, such as use-after-free vulnerabilities. An object class is configured with a secret cookie in a virtual function table of the object, e.g., inserted at compile time. An instrumentation check inserted in the program code evaluates the secret cookie to determine whether the object state has been corrupted before object access (e.g., a call to one of the object's methods) is allowed. If corrupted, access to the object is prevented by the instrumentation check. Another instrumentation check may be used to determine whether the object's virtual table pointer points to a location outside of the module that contains the legitimate virtual function table; if so, object access is prevented.
    • 该主题披露旨在防止恶意代码利用对象状态破坏漏洞(例如使用后免费漏洞)。 对象类在对象的虚拟功能表中配置有秘密cookie,例如在编译时插入。 插入程序代码中的检测检查将评估秘密cookie,以确定对象状态是否在对象访问之前已被破坏(例如,对对象的方法之一的调用)。 如果损坏,仪器检查会阻止对对象的访问。 可以使用另一种仪器检查来确定对象的虚拟表指针是否指向包含合法虚拟功能表的模块之外的位置; 如果是这样,则可以防止对象访问。