scispace - formally typeset
Patent

Method for safely instrumenting large binary code

Reads0
Chats0
TLDR
In this paper, a method for safely editing a binary code to be executed on a computer system is presented, where a large binary code is transformed into a number of smaller binary code segments having sizes within a reference range of a control transfer function such as a branch instruction.
Abstract
A method is provided for safely editing a binary code to be executed on a computer system. The method allows the binary code to be directly edited without compromising its integrity. More specifically, a larger binary code is transformed into a number of smaller binary code segments having sizes within a reference range of a control transfer function such as a branch instruction. A branch slamming operation can then used to displace a binary instruction contained within a smaller binary code segment with a branch instruction referring to a binary patch that is appended to the smaller binary code segment. The binary instruction displaced by the branch instruction is preserved in the binary patch. Upon completion of the binary patch execution, the smaller binary code segment continues executing with a binary instruction immediately following the branch instruction. The method for safely editing the binary code is particularly useful with large binary codes having sizes greater than the reference range of the control transfer function.

read more

Citations
More filters
Patent

Binary rewriting without relocation information

TL;DR: A binary rewriter that can provide complete code coverage without relocation information is provided in this paper, together with a method of performing such rewriting, which can include processing a binary file as an original binary file, and disassembling the binary file to provide a disassembled binary file.
Patent

Method and system for program editing

TL;DR: In this paper, a method and system for editing a software program in a common language runtime environment is described, where the software program has a source code component, an intermediate language component, and a native code component.
Patent

Runtime patching of native-code programs

TL;DR: In this article, a code patching component may insert a redirection patch into a native code representation of the program to identify a patch area in the native-code representation and copy existing code from the patch area to another location for subsequent emulation by a trap handler.
Patent

Method and system for program editing and debugging in a common language runtime environment

TL;DR: In this paper, an integrated development environment (IDE) propagates the edit(s) into a common language runtime (CLR) environment before continuing, and the IDE can facilitate determining "legality" of an edit; building the edit; sending the edit to the CLR environment; and/or, facilitating the runtime environment switch execution to the edited code.
Patent

Internal monitoring of applications in a distributed management framework

TL;DR: In this article, a distributed management framework for internal monitoring of applications is presented, where a plurality of applications and application servers are configured to make function calls to standard programming functions, and the function calls are intercepted.
References
More filters
Proceedings Article

Detours: binary interception of Win32 functions

TL;DR: The Detours library is presented, a library for instrumenting arbitrary Win32 functions on x86 machines and is the first package on any platform to logically preserve the un-instrumented target function as a subroutine for use by the instrumentation.
Patent

Dynamic software code instrumentation method and system

TL;DR: In this paper, a method and system of monitoring code after being compiled or assembled is provided, where software code instructions such as function preamble and data manipulation instructions are identified using debug information and then dynamically replaced with an instruction that will branch execution to a scratchpad buffer.
Patent

Software instrumentation method and apparatus

TL;DR: The class interceptor, doppelganger and method hijacking software instrumentation techniques as mentioned in this paper can intercept and monitor the paths of execution associated with methods inherited by a target class.
Patent

Dynamic instrumentation of an executable program

TL;DR: In this paper, a shared memory segment is created for an instrumentation program and the application program, and corresponding substitute functions are created in the shared memory, the substitute versions including instrumentation code.
Patent

Method and apparatus for extraction of program region

TL;DR: In this article, the authors present a method and apparatus for marking a region of source code within a program unit and extracting an executable version of this marked region of code, which has a initialized program state equivalent to that of the original code when the original source code entered the region.
Trending Questions (1)
How to edit an executable binary to change the behaviour?

The paper provides a method for safely editing a binary code without compromising its integrity, specifically for large binary codes.