基于Libsafe的缓冲区溢出防范技术的研究

缓冲区溢出漏洞问题是一种常见的程序漏洞,在所有的操作系统中平台上或多或少都存在着这样漏洞,文章首先介绍缓冲区漏洞的主要原因和常用的防范措施,然后深入讨论一种基于Libsafe的格式化串漏洞的防范和堆栈溢出防范技术的实现原理和方法。该方法容易实现,配置简单,只要配置LD_PRELOAD环境变量,操作系统就可以调用,不会给系统带来额外的负担,不需要重新编译已经存在的应用程序,可以防范很多未知的缓冲区溢出漏洞。

Research of Anti-buffer Overflow Based on Libsafe

Buffer overflow is a kind phenomenon that we offen meet in many computer operating system.In this paper reason and anti-measures of buffer overflow were introduced firstly.and than, discuss how to prevent system from buffer overflow by Libsafe format string and stack overflow.compared other anti-buffer overflow this way look more easy to implement and configure. only configure the LD_PRELOAD environment variable the operating system can recall and keep away some buffer overflow unknowed in advance without recompiled the application program.