Abstract
The present disclosure discloses a method and a system for protecting the call stack of an API without impacting the functional design of the API. The method includes serializing input values and computing and storing a checksum value based on the serialized values into one commonly accessible buffer before pushing to call stack. Similarly, at the callee, the received values are serialized and the checksum so obtained from the serialized values are then compared against the previously stored checksum value to detect any vulnerability/attack. The present disclosure provides a novel mechanism which protects the call stack from external attacks in an efficient manner.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Chen, Yuexi, "Software Call Stack Protection Technique", Technical Disclosure Commons, (February 12, 2024)
https://www.tdcommons.org/dpubs_series/6683