关键词: 漏洞定位,整数溢出漏洞,动态污点分析

Abstract: In recent years,the number of integer overflow vulnerabilities is still high and they have great threat to securi-ty.However,in the previous study,methods of locating vulnerable code are only used when patches or vulnerabilities’ proof of concept (POC) are automatically generated.Besides,when locating the vulnerable code,most of the previous methods tend to undermine buffer overflow that will cause its adjacent memory data to be overwritten.Integer overflow vulnerabilities,however,cannot directly overwrite important data,therefore,existing methods cannot locate integer overflow vulnerable code effectively.Currently,existing analysis of integer overflow vulnerabilities is inefficient and time-consuming as they are mostly conducted manually by manpower.In the present study,consequently,a novel method was proposed to locate vulnerable code of integer overflow.With view to enhance the efficiency on the part of analysts,this method combines dynamic taint analysis and EFLAGS register comparison so that it will decrease the number of instructions which can be used to locate the overflow point.On the basis of that,a system was further implemented and several experiments were conducted to verify our proposed method.The results show that our method is effective and efficient.

Key words: Vulnerabilities,Integer overflow,Dynamic taint analysis