A Static Taint Detection Method for Stack Overflow Vulnerabilities in Binaries

摘要

The current static analysis approaches for detecting stack overflow vulnerabilities in binaries are only usable to the functions in system libraries and not suitable for user defined functions. In this paper, we model the characteristic of stack overflow vulnerabilities and propose a static taint analysis method, which can recognize user defined functions that may have that type of vulnerabilities. The experiments on 4 runtime libraries and 2 executables show that this method can find the stack overflow vulnerabilities in binaries correctly and effectively.