Efficient patching

• US 7,890,946 B2
• Filed: 06/30/2004
• Issued: 02/15/2011
• Est. Priority Date: 05/11/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Golan, Gilad, Blumfield, Anthony, Alshibani, Saud, Field, Scott A., Garms, Jason
• Primary Examiner(s): Vo; Ted T
• Application Number:
  US10/880,709
• Publication Number:
  US 20050257207A1
• Time in Patent Office: 2,421 Days
• Field of Search: 717124-126, 717168-178, 713/191
• US Class Current: 717/171
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A facility for augmenting software in a target computer system is described. The facility receives and augmentation specification in the target computer system. The augmentations specification specifies: (a) a function to be augmented, (b) a parameter of the function to be tested, (c) a test to apply to the specified parameter, and (d) and modification to perform to the behavior of the function if the specified test is not satisfied by the specified parameter. When the specified function is invoked on the target computer system, if the specified tested is not satisfied by the specified parameter, the facility performs the specified modification to the behavior of the specified function.

Claims

1. A method in a computing system for augmenting software, comprising:

receiving in a target computer system an augmentation specification specifying (a) a programmatic function to be augmented, the specified programmatic function being among software existing in the computing system, (b) an argument of the specified programmatic function, (c) a test to apply to the specified argument, and (d) a modification to perform to the behavior of the specified programmatic function if the specified test is not satisfied by the specified argument; and

when the specified programmatic function is invoked on the target computer system, if the specified test is not satisfied by the specified argument, performing the specified modification to the behavior of the specified programmatic function.

2. The method of claim 1, wherein the modification specified by the augmentation specification is preventing the execution of the specified programmatic function.

3. The method of claim 1, wherein the modification specified by the augmentation specification is executing the specified programmatic function after alteration of the specified argument.

4. The method of claim 1, wherein a plurality of augmentation specifications are received in the target computer system.

5. The method of claim 4, further comprising maintaining all of the received augmentation specifications in a data structure.

6. The method of claim 1 wherein no user intervention is required subsequent to receiving the augmentation specification in order to perform the specified modification to the behavior of the specified programmatic function.

7. The method of claim 1 wherein the augmentation specification specifies a test to be applied to the specified argument by identifying an argument testing function to invoke whose code is not included in the augmentation specification.

8. The method of claim 1 wherein the augmentation specification specifies a test to be applied to the specified argument by identifying an argument testing function to invoke that was installed before the augmentation specification was received.

9. The method of claim 1 wherein the augmentation specification contains code.

10. The method of claim 9 wherein the code contained by the augmentation specification includes code invoking an argument testing function.

11. The method of claim 1 wherein the augmentation specification contains text identifying an argument testing function whose code is not included in the augmentation specification.

12. The method of claim 1 wherein the augmentation specification contains code for an argument testing function for performing the specified test.

13. The method of claim 11 wherein the code of the argument testing function identified by the text contained by the augmentation specification is not contained by the augmentation specification.

14. The method of claim 1 further comprising providing an interface for configuring a state for controlling the operation of the augmentation specification,

and wherein the specified modification to the behavior of the specified function is performed only when the state is an enabled state.

15. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured locally.

16. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured remotely.

17. The method of claim 14 wherein the provided interface enables the operation of the augmentation specification to be configured in accordance with a policy.

18. The method of claim 14 wherein the specified test is performed before any substantive code of the specified function is executed.

19. The method of claim 1 further comprising providing an interface for configuring warnings associated with the augmentation specification, and wherein, if the provided interface is used to enable warnings, generating a warning each time the test specified by the augmentation specification fails.

20. The method of claim 1, further comprising providing an interface for configuring notifications associated with the augmentation specification, and wherein, if the provided interface is used to enable notifications, generating a notification each time the test specified by the augmentation specification is performed.

21. The method of claim 20, further comprising consolidating the generated notifications into a single consolidated notification.

22. The method of claim 1 wherein the received augmentation specification is signed,

the method further comprising verifying the signature of the augmentation specification, and wherein the specified modification to the behavior of the specified programmatic function is performed only if verification of the signature of the augmentation specification was successful.

23. The method of claim 22 wherein the specified modification to the behavior of the specified programmatic function is performed only if the signer of the signature of the augmentation specification matches a signer of the software containing the specified programmatic function.

24. The method of claim 1, further comprising performing the specified test in response to detecting that the specified programmatic function has been invoked, without altering the code of the specified programmatic function.

25. The method of claim 1, further comprising altering the code of the specified programmatic function to perform the specified test when the specified programmatic function is invoked.

26. The method of claim 25 wherein the code of the specified programmatic function is altered by inserting into the code of the specified programmatic function a jump to a separate routine that performs the specified test.

27. The method of claim 1 wherein the specified programmatic function is provided in a distinguished executable module that is loadable using a loader, the method further comprising registering with the loader to have a routine that performs the specified test called before the specified programmatic function is executed in response to each invocation of the specified function.

28. A computing system that enables augmentation of software present in the computing system, comprising:

a storage device containing software;

a patch receiver that receives in the computing system a patch specifying (a) a point at which the software is to be augmented, (b) a value accessed by the software to be tested at the specified point, (c) a test to apply to the specified value, and (d) a modification to perform to the behavior of the software if the specified test is not satisfied by the specified value; and

a patching agent that injects code into the software at the specified point such that, when execution of the software reaches the specified point on the target computer system, if the specified test is not satisfied by the specified value, the specified modification to the behavior of the software is performed.

29. A computer-readable storage medium containing computer-executable instructions that cause a target computing system to perform a method for adding value validation to software available in the target computing system, comprising:

receiving in the computing system an augmentation specification specifying (a) a programmatic function to which value validation is to be added, the specified programmatic function being among software available in the computing system, (b) data to be tested that exists in the target computing system during execution of the specified programmatic function, (c) a test to apply to the specified data, and (d) a modification to perform to the behavior of the function if the specified test is not satisfied by the specified data; and

when the specified programmatic function is invoked on the target computer system, if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified programmatic function.

30. The computer-readable storage medium of claim 29 wherein the specified test is a test that is always satisfied, irrespective of the value of the specified data.

31. A computer-readable storage medium encoding a patch data structure, comprising:

information identifying a programmatic function to which value validation is to be added;

information identifying data to be tested that exists in a target computer system during execution of the function;

information identifying a test to apply to the identified data; and

information identifying a modification to perform to the behavior of the identified programmatic function if the identified test is not satisfied by the identified data,

such that, if the patch data structure is received on a target computer system on which the identified programmatic function is executed, the contents of the patch data structure may be used to perform the identified modification to the behavior of the identified programmatic function if the identified test is not satisfied by the identified data when the identified programmatic function is invoked on the target computer system.

32. The computer-readable storage medium of claim 31 wherein the patch data structure is transmitted between computer systems.

33. The computer-readable storage medium of claim 31 wherein the patch data structure is transmitted within a computer system.

34. A method for adding value validation to software available in a target computing system, comprising:

receiving in the computing system an augmentation specification specifying (a) software to which value validation is to be added, (b) a point in the specified software at which value validation is to be added, (c) data to be tested that exists in the target computing system during execution of the specified software at the specified point, (d) a test to apply to the specified data, and (e) a modification to perform to the behavior of the software if the specified test is not satisfied by the specified data;

enabling a user to configure an operational mode for the received augmentation specification; and

when the specified software is executed at the specified point on the target computer system, applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification.

35. The method of claim 34 wherein the user configures an active operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises, if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified software.

36. The method of claim 34 wherein the user configures an active diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises, if the specified test is not satisfied by the specified data, both (1) performing the specified modification to the behavior of the specified software, and (2) generating a notification that the specified test is not satisfied by the specified data.

37. The method of claim 34 wherein the user configures a verbose active operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

if the specified test is not satisfied by the specified data, performing the specified modification to the behavior of the specified software; and

generating a notification that the specified test was performed.

38. The method of claim 34 wherein the user configures an active verbose diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

if the specified test is not satisfied by the specified data, both (1) performing the specified modification to the behavior of the specified software, and (2) generating a notification that the specified test is not satisfied by the specified data; and

generating a notification that the specified test was performed.

39. The method of claim 34 wherein the user configures an inactive operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data.

40. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data; and

if the specified test is not satisfied by the specified data, generating a notification that the specified test is not satisfied by the specified data.

41. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data; and

generating a notification that the specified test was performed.

42. The method of claim 34 wherein the user configures an inactive diagnostic operational mode for the augmentation specification, and wherein applying the received augmentation specification in a manner consistent with the operational mode configured for the received augmentation specification comprises:

omitting to perform the specified modification to the behavior of the specified software, irrespective of whether the specified test is satisfied by the specified data;

generating a notification that the specified test was performed; and

if the specified test is not satisfied by the specified data,

generating a notification that the specified test is not satisfied by the specified data.