Stack entry overwrite protection

• US 9,245,110 B2
• Filed: 12/17/2013
• Issued: 01/26/2016
• Est. Priority Date: 12/17/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Deutschle, Joerg, Gellerich, Wolfgang, Kick, Bernhard, Koch, Gerrit
• Primary Examiner(s): SHAW, PETER C
• Application Number:
  US14/108,418
• Publication Number:
  US 20150169868A1
• Time in Patent Office: 770 Days
• Field of Search: 726/22
• US Class Current: 1/1
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow

Abstract

A computer processor receives a plurality of execution items corresponding to a computer process. The computer processor allocates a first memory portion corresponding to a first stack, wherein the first stack corresponds to a first class of execution items. The computer processor allocates a second memory portion corresponding to a second stack, wherein the second stack corresponds to a second class of execution items. The computer processor identifies a first execution item of the plurality of execution items and determining a class corresponding to the first execution item.

Claims

1. A computer program product for protecting against stack overflow events, the computer program product comprising:

one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media, the program instructions comprising program instructions to;

receive a plurality of execution items corresponding to the computer process; and

allocate a plurality of memory portions, wherein the plurality of memory portions includes;

(i) a first memory portion corresponding to a first stack, the first stack corresponding to a first class of execution items and the first stack being associated with a first access key; and

(ii) a second memory portion corresponding to a second stack, the second stack corresponding to a second class of execution items, and the second stack being associated with a second access key,

wherein the first class corresponds to extendable data types and the second class corresponds to non-extendable data types.

2. The computer program of claim 1, further comprising program instructions to:

identify a first execution item of the plurality of execution items;

determine that the first execution item corresponds to the first class; and

store the first execution item to the first stack.

3. The computer program of claim 1, further comprising program instructions to:

identify a first execution item of the plurality of execution items;

determine that the first execution item corresponds to the second class; and

store the first execution item to the second stack.

4. The computer program of claim 1, wherein each memory portion of the plurality of memory portion corresponds to a memory stack associated with an access key.

5. The computer program of claim 2, further comprising program instructions to:

store the first execution item to the first stack based, at least in part, on a determination that (i) the first execution item of the plurality of execution items corresponds to the first class and (ii) the first execution item includes a key that corresponds to the first access key of the first memory portion.

6. A computer system for protecting against stack overflow events, the computer system comprising:

one or more computer processors;

one or more computer-readable storage media;

program instructions stored on the computer-readable storage media for execution by at least one of the one or more processors, the program instructions comprising program instructions to;

receive a plurality of execution items corresponding to the computer process; and

allocate a plurality of memory portions, wherein the plurality of memory portions includes;

(i) a first memory portion corresponding to a first stack, the first stack corresponding to a first class of execution items and the first stack being associated with a first access key; and

(ii) a second memory portion corresponding to a second stack, the second stack corresponding to a second class of execution items, and the second stack being associated with a second access key,

wherein the first class corresponds to extendable data types and the second class corresponds to non-extendable data types.

7. The computer system of claim 6, further comprising program instructions to:

identify a first execution item of the plurality of execution items;

determine that the first execution item corresponds to the first class; and

store the first execution item to the first stack.

8. The computer system of claim 6, further comprising program instructions to:

identify a first execution item of the plurality of execution items;

determine that the first execution item corresponds to the second class; and

store the first execution item to the second stack.

9. The computer system of claim 6, wherein each memory portion of the plurality of memory portions corresponds to a memory stack associated with an access key.

10. The computer system of claim 7, further comprising program instructions to

store the first execution item to the first stack based, at least in part, on a determination that (i) the first execution item of the plurality of execution items corresponds to the first class and (ii) the first execution item includes a key that corresponds to the first access key of the first memory portion.