Efficient patching

• US 20050257207A1
• Filed: 06/30/2004
• Published: 11/17/2005
• Est. Priority Date: 05/11/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Golan, Gilad, Blumfield, Anthony, Alshibani, Saud, Garms, Jason
• Granted Patent: US 7,890,946 B2
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

Claims

1. A method in a computing system for augmenting software, comprising:

receiving in a target computer system an augmentation specification specifying (a) a function to be augmented, the specified function being among software executed in the computing system, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) a modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter; and

when the specified function is invoked on the target computer system, if the specified test is not satisfied by the specified parameter, performing the specified modification to the behavior of the specified function.

2. The method of claim 1 wherein the modification specified by the augmentation specification is preventing the execution of the specified function.

3. The method of claim 1 modification specified by the augmentation specification is executing the specified function after alteration of the specified parameter.

4. The method of claim 1, wherein a plurality of augmentation specifications are received in the target computer system.

5. The method of claim 4, further comprising maintaining all of the received augmentation specifications in a data structure.

6. The method of claim 1 wherein no user intervention is required subsequent to receiving the augmentation specification in order to perform the specified modification to the behavior of the specified function.

7. The method of claim 1 wherein the augmentation specification specifies a test to applied to the specified parameter by identifying a parameter testing function to invoke whose code is not included in the augmentation specification.

8. The method of claim 1 wherein the augmentation specification specifies a test to be applied to the specified parameter by identifying a parameter testing function to invoke that was installed before the augmentation specification was received.

9. The method of claim 1 wherein the augmentation specification contains code.

10. The method of claim 9 wherein the code contained by the augmentation specification includes code invoking a parameter testing function whose code is not included in the augmentation specification.

11. The method of claim 1 wherein the augmentation specification contains text identifying a parameter testing function whose code is not included in the augmentation specification.

12. The method of claim 11 wherein the code of the parameter testing function identified by the text contained by the augmentation specification is contained by the augmentation specification.

13. The method of claim 11 wherein the code of the parameter testing function identified by the text not contained by the augmentation specification is not contained by the augmentation specification.

14. The method of claim 1 further comprising providing an interface for configuring a state for controlling the operation of the augmentation specification, and wherein the specified modification to the behavior of the specified function is performed only when the state is an enabled state.

15. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured locally.

16. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured remotely.

17. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured in accordance with a policy.

18. The method of claim 14 wherein the specified test is performed before any substantive code of the specified function is executed.

19. The method of claim 1 further comprising providing an interface for configuring warnings associated with the augmentation specification, and wherein, if the provided interface is used to enable warnings, generating a warning each time the test specified by the augmentation specification fails.

20. The method of claim 1, further comprising providing an interface for configuring notifications associated with the augmentation specification, and wherein, if the provided interface is used to enable notifications, generating a notification each time the test specified by the augmentation specification is performed.

21. The method of claim 20, further comprising consolidating the generated notifications into a single consolidated notification.

22. The method of claim 1 wherein the received augmentation specification is signed,

the method further comprising verifying the signature of the augmentation specification,

and wherein the specified modification to the behavior of the specified function is performed only if verification of the signature of the augmentation specification was successful.

23. The method of claim 22 wherein the specified modification to the behavior of the specified function is performed only if the signer of the signature of the augmentation specification matches a signer of the software containing the specified function.

24. The method of claim 1, further comprising performing the specified test in response to detecting that the specified function has been invoked, without altering the code of the specified function.

25. The method of claim 1, further comprising altering the code of the specified function to perform the specified test when the specified function is invoked.

26. The method of claim 25 wherein the code of the specified function is altered by inserting into the code of the specified function a jump to a separate routine that performs the specified test.

27. The method of claim 1 wherein the specified function is provided in a distinguished executable module that is loadable using a loader, the method further comprising registering with the loader to have a routine that performs the specified test called before the specified function is executed in response to each invocation of the specified function.

30. The computer-readable medium of claim 22 wherein the specified test is a test that is always satisfied, irrespective of the value of the specified data.

28. A computing system that enables augmentation of software present in the computing system, comprising:

a storage device containing software;

a patch receiver that receives in the computing system a patch specifying (a) a point at which the software is to be augmented, (b) a value associated with the function to be tested at the specified point, (c) a test to apply to the specified value, and (d) a modification to perform to the behavior of the software if the specified test is not satisfied by the specified value; and

a patching agent that injects code into the software at the specified point such that, when execution of the software reaches the specified point on the target computer system, if the specified test is not satisfied by the specified value, the specified modification to the behavior of the software is performed.

29. A computer-readable medium whose contents cause a target computing system to perform a method for adding value validation to software available in the target computing system, comprising:

receiving in the computing system an augmentation specification specifying (a) a function to which value validation is to be added, the specified function being among software available in the computing system, (b) data to be tested that exists in the target computing system during execution of the function, (c) a test to apply to the specified data, and (d) a modification to perform to the behavior of the function if the specified test is not satisfied by the specified data; and

when the specified function is invoked on the target computer system, if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified function.

31. A generated data signal conveying a patch data structure, comprising:

information identifying a function to which value validation is to be added;

information identifying data to be tested that exists during execution of the function;

information identifying a test to apply to the specified data; and

to information identifying a modification to perform to the behavior of the function if the specified test is not satisfied by the specified data, such that, if the data signal is received on a target computer system on which the specified function is executed, the contents of the data structure may be used to perform the specified modification to the behavior of the specified function if the specified test is not satisfied by the specified data when the specified function is invoked on the target computer system.

32. The generated data signal of claim 31 wherein the generated data signal is transmitted between computer systems.

33. The generated data signal of claim 31 wherein the generated data signal is transmitted within a computer system.

34. A method for adding value validation to software available in the target computing system, comprising:

receiving in the computing system an augmentation specification specifying (a) software to which value validation is to be added, (b) a point in the specified software at which value validation is to be added, (c) data to be tested that exists in the target computing system during execution of the specified software at the specified point, (d) a test to apply to the specified data, and (e) a modification to perform to the behavior of the software if the specified test is not satisfied by the specified data;

enabling a user to configure an operational mode for the received augmentation specification; and

when the specified software is executed at the specified point on the target computer system, applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification.

35. The method of claim 34 wherein the user configures an active operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises, if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified software.

36. The method of claim 34 wherein the user configures an active diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises, if the specified test is not satisfied by the specified data, both (1) performing the specified modification to the behavior of the specified software, and (2) generating a notification that the specified test is not satisfied by the specified data.

37. The method of claim 34 wherein the user configures a verbose active operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified software; and

generating a notification that the specified test was performed.

38. The method of claim 34 wherein the user configures an active verbose diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

if the specified test is not satisfied by the specified data, both (1) performing the specified modification to the behavior of the specified software, and (2) generating a notification that the specified test is not satisfied by the specified data; and

generating a notification that the specified test was performed.

39. The method of claim 34 wherein the user configures an inactive operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data.

40. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data; and

if the specified test is not satisfied by the specified data, generating a notification that the specified test is not satisfied by the specified data.

41. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data; and

generating a notification that the specified test was performed.

42. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data;

generating a notification that the specified test was performed; and

if the specified test is not satisfied by the specified data, generating a notification that the specified test is not satisfied by the specified data.