Detecting buffer overflows using frame pointer characteristics
US8037526B1 · kind B1 · utility
6Cited by
8References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Mar 30, 2005 |
| Grant date | Oct 11, 2011 |
| Priority date | — |
| Expiry date | Aug 11, 2030 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/52
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method makes use of positional relationships in a memory stack between the frame pointer, such as the Extended Base Pointer (EBP) in Windows®-based systems, of a critical call initiating function making a call to a critical operating system (OS) function, the top of stack position, such as the Process Environment Block (PEB) in Windows® based systems, and the bottom of stack position, such as the Extended Stack pointer (ESP) in a Windows® based system, to detect and block buffer overflows.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.