Detecting heap and stack execution in the operating system using regions

No: 7484239
Numero de solicitud: 11000817
Fecha archivado: 2004-11-30
Fecha emision: 2009-01-27
Tipo: B1
Demandas: 20
Hojas de dibujos: 5
Resumen: A call to a critical operating system function is stalled. The pregion and pregion type associated with the location of a call module originating the call is determined. In one embodiment, when the pregion type is either a stack or a heap pregion type, protective action is taken, such as terminating the call, otherwise the call is released. In another embodiment, when the pregion type is either a text or shared memory pregion type, the call is released, otherwise protective action is taken.
Inventores:
	Tester Jonathan  (2)
	Verma Sunita  (1)
Examinador principal: Zand Kambiz
Ayundate de examinador: Jackson Jenise E
Agentes:
	Gunnison, McKay & Hodgson, L.L.P. (ORG)  (267)
	Hodgson Serge J.  (80)
Cesionarios:
	Symantec Corporation (ORG)  (133)
Campo de busqueda:
	No:164 - Security kernel or utility
Otras referencias:
	“HP-UX Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet: .
	“HP-UX Process Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-124 [online]. Retrieved from the Internet:.
	Szor, P., U.S. Appl. No. 10/681,623, filed Oct. 7, 2003 and entitled “Unmapped Code Blocking System and Method”.
	“Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet:.
Referencias:
	6412071 - Method for secure function execution by calling address validation