Invention Grant
- Patent Title: Technologies for deterministic code flow integrity protection
-
Application No.: US15276895Application Date: 2016-09-27
-
Publication No.: US10223528B2Publication Date: 2019-03-05
- Inventor: Michael E. Kounavis , David M. Durham , Ravi L. Sahita , Karanvir S. Grewal
- Applicant: Intel Corporation
- Applicant Address: US CA Santa Clara
- Assignee: Intel Corporation
- Current Assignee: Intel Corporation
- Current Assignee Address: US CA Santa Clara
- Agency: Barnes & Thornburg LLP
- Main IPC: G06F21/00
- IPC: G06F21/00 ; G06F21/54 ; G06F21/56

Abstract:
Technologies for code flow integrity protection include a static analyzer that identifies a potential gadget in an atomic code path of a protected code. A marker instruction is inserted after the potential gadget with a parameter that corresponds to an address of the marker instruction, a hash evaluator instruction is inserted after an exit point of the atomic code path with a parameter that corresponds to the address of the marker instruction, and a compare evaluator instruction and a hash check instruction are inserted after the hash evaluator instruction. A target computing device executes the protected code and updates a path hash as a function of the parameter of the marker instruction, determines an expected hash value as a function of the parameter of the hash evaluator instruction, and generates an exception if the path hash and the expected hash value do not match. Other embodiments are described and claimed.
Public/Granted literature
- US20180089422A1 TECHNOLOGIES FOR DETERMINISTIC CODE FLOW INTEGRITY PROTECTION Public/Granted day:2018-03-29
Information query