System, method and computer program product for preventing the execution of unwanted code
View Patent ↗A system, method and computer program product are provided for preventing the execution of unwanted code. An indicator is initially received which is representative of an amount of data to be read from a stack. An amount of data is then read from the stack based on the indicator, such that execution of unwanted code is avoided.
1. A method, comprising:
receiving an indicator representative of an amount of data to be read from a stack; and
reading from the stack the amount of data based on the indicator, utilizing a processor;
wherein execution of unwanted code is avoided;
wherein the indicator is received in association with a routine called by a client application;
wherein the indicator is conditionally received based on whether the routine includes at least one of a printf routine and a scanf routine.
2. The method of claim 1 , wherein the indicator is representative of a number of bytes of data to be read from the stack.
3. The method of claim 1 , wherein the indicator is conditionally received based on the routine.
4. The method of claim 1 , wherein the indicator is conditionally received based on a vulnerability of the routine.
5. The method of claim 1 , wherein the data read from the stack includes arguments associated with the routine.
6. The method of claim 1 , wherein the reading is stopped upon reading from the stack the amount of data.
7. The method of claim 1 , wherein the receiving is carried out utilizing a compiler.
8. The method of claim 7 , wherein the indicator is received from a library.
9. The method of claim 8 , wherein the library includes a run-time library.
10. The method of claim 1 , wherein the execution of unwanted code is avoided by preventing the reading of data beyond the amount, which is at least potentially malicious.
11. A computer program product embodied on a computer readable medium, comprising:
computer code for receiving an indicator representative of an amount of data to be read from a stack; and
computer code for reading from the stack the amount of data based on the indicator;
wherein the computer program product is operable such that execution of unwanted code is avoided;
wherein the computer program product is operable such that the indicator is conditionally received based on whether a routine includes at least one of a printf routine and a scanf routine.
12. A system, comprising:
a processor; and
a compiler for utilizing an indicator representative of an amount of data to be read from a stack;
wherein the system is operable such that the amount of data is read from the stack data based on the indicator so that execution of unwanted code is avoided;
wherein the system is operable such that the indicator is received in association with a routine called by a client application;
wherein the system is operable such that the indicator is conditionally received based on whether the routine includes at least one of a printf routine and a scanf routine.
13. The system of claim 12 , wherein a library is in communication with the compiler.
14. The system of claim 13 , wherein the client application is in communication with the compiler.