Applying control flow integrity verification in intermediate code files

摘要

A method of generating compiled intermediate code files adjusted to apply execution control flow verification 100 comprising receiving intermediate code file(s) generated by a compiler which comprise a plurality of routines and adjusting the intermediate code file(s) prior to generating a respective executable file for execution by one or more processors 204. The adjustment comprising analyzing the intermediate code file(s) to identify valid execution path(s) describing order of execution of preceding routines executed prior to execution of each critical routine 106, adding registration code segment(s) configured to register execution of each routine in a runtime execution sequence 108, adding flow validation code segment(s) configured to verify the runtime execution sequence against the valid execution path(s) before invoking the critical routine(s) 110 and outputting the adjusted intermediate code file(s) 114. In runtime, in case the runtime execution sequence does not match a valid execution path(s), the flow validation code segment causes the processor(s) 204 to initiate predefined action(s).