Detecting heap and stack execution in the operating system using regions

No: 7484239
Antragsnr.: 11000817
Einreichungsdatum: 2004-11-30
Ausstellungsdatum: 2009-01-27
Art: B1
Anspruch: 20
Zeichnungsblatter: 5
Zusammenfassung: A call to a critical operating system function is stalled. The pregion and pregion type associated with the location of a call module originating the call is determined. In one embodiment, when the pregion type is either a stack or a heap pregion type, protective action is taken, such as terminating the call, otherwise the call is released. In another embodiment, when the pregion type is either a text or shared memory pregion type, the call is released, otherwise protective action is taken.
Erfinder:
	Tester Jonathan  (2)
	Verma Sunita  (1)
Hauptuntersucher: Zand Kambiz
Hilfsuntersucher: Jackson Jenise E
Agenten:
	Gunnison, McKay & Hodgson, L.L.P. (ORG)  (267)
	Hodgson Serge J.  (80)
Beauftragte:
	Symantec Corporation (ORG)  (133)
Suchbereich:
	No:164 - Security kernel or utility
Andere Hinweise:
	“HP-UX Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet: .
	“HP-UX Process Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-124 [online]. Retrieved from the Internet:.
	Szor, P., U.S. Appl. No. 10/681,623, filed Oct. 7, 2003 and entitled “Unmapped Code Blocking System and Method”.
	“Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet:.
Hinweise:
	6412071 - Method for secure function execution by calling address validation