Efficiently detecting all dangling pointer uses in production servers

Proceedings of the International Conference on Dependable Systems and Networks

Volumn 2006, Issue , 2006, Pages 269-278

  Dhurjati, Dinakar ^a   Adve, Vikram ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); COMPUTER SOFTWARE; ELECTRIC FENCES; SOFTWARE ENGINEERING; STORAGE ALLOCATION (COMPUTER); UNIX;

DANGLING POINTERS; MEMORY ALLOCATORS; TRANSFORMATION PARTITIONS; VIRTUAL PAGES;

SERVERS;

EID: 33845580061     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2006.31     Document Type: Conference Paper

References (21)

1. MySQL double free heap corruption vulnerability, http://www. securityfocus.com/bid/6718/info, Jan 2003.
2. MITKRB5-SA: double free vulnerabilities, http://seclists.org/lists/ bugtraq/2004/sep/0015.html, Aug 2004.
3. T. M. Austin, S. E. Breach, and G. S. Sohi. Efficient detection of all pointer and array access errors. In ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), June 1994.
4. D. Dhurjati and V. Adve. Backwards-compatible array bounds checking for C with very low overhead. In Proc. 28th Int l Conf. on Software Engineering (ICSE), Shanghai, China, May 2006.
5. D. Dhurjati, S. Kowshik, and V. Adve. SAFECode: Enforcing alias analysis for weakly typed languages. In ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), June 2006.
6. D. Dhurjati, S. Kowshik, V. Adve, and C. Lattner. Memory safety without garbage collection for embedded applications. ACM Transactions on Embedded Computing Systems, Feb. 2005.
7. I. Dobrovitski. Exploit for cvs double free() for linux pserver. http://seclists.org/lists/bugtraq/2003/feb/0042.html, Feb 2003.
8. R. Hastings and B. Joyce. Purify: Fast detection of memory leaks and access errors. In Winter USENIX, 1992.
9. R. W. M. Jones and P. H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in c programs. In Automated and Algorithmic Debugging, pages 13-26, 1997.
10. C. Lattner and V. Adve. LLVM: A Compilation Framework for Lifelong Program Analysis and Transformation. In Proc. Int l Symp. on Code Generation and Optimization (CGO), San Jose, Mar 2004.
11. C. Lattner and V. Adve. Automatic pool allocation: Improving performance by controlling data structure layout in the heap. In Proc. ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), Chicago, IL, Jun 2005.
12. C. Lattner and V. Adve. Transparent Pointer Compression for Linked Data Structures. In MSP, Chicago, IL, Jun 2005.
13. Microsoft. How to use Pageheap.exe in Windows XP and Windows 2000. http://support.microsoft.com/?kbid=286470.
14. G. C. Necula, J. Condit, M. Harren, S. McPeak, and W. Weimer. Ccured: type-safe retrofitting of legacy software. ACM Transactions on Programming Language and Systems, 27(3):477-526, 2005.
15. H. Patil and C. Fischer. Low-cost, concurrent checking of pointer and array accesses in c programs. Software Practice and Experience, 27(1):87-110, 1997.
16. B. Perens. Electric fence malloc debugger, http://perens.com/ FreeSoftware/ElectricFence/.
17. J. Seward. Valgrind, an open-source memory debugger for x86-gnu/linux.
18. L. Torvalds. mremap feature discussion, see http://lkml.org/lkml/2004/1/ 12/265.
19. W. Xu, D. C. DuVarney, and R. Sekar. An efficient and backwards-compatible transformation to ensure memory safety of C programs. In Proc. 12th ACM SIGSOFT Symposium on Foundations of Software Engineering, pages 117-126, 2004.
20. S. H. Yong and S. Horwitz. Protecting C programs from attacks via invalid pointer dereferences. In Foundations of Software Engineering, 2003.
21. Y. Younan. An overview of common programming security vulnerabilities and possible solutions. Master s thesis, Vrije Universiteit Brussel, 2003.