Please use this identifier to cite or link to this item: https://doi.org/10.1145/3385412.3385972
Title: Binary rewriting without control flow recovery
Authors: Duck, GJ 
Gao, X 
Roychoudhury, A 
Issue Date: 11-Jun-2020
Publisher: ACM
Citation: Duck, GJ, Gao, X, Roychoudhury, A (2020-06-11). Binary rewriting without control flow recovery. PLDI '20: 41st ACM SIGPLAN International Conference on Programming Language Design and Implementation : 151-163. ScholarBank@NUS Repository. https://doi.org/10.1145/3385412.3385972
Abstract: © 2020 ACM. Static binary rewriting has many important applications in software security and systems, such as hardening, repair, patching, instrumentation, and debugging. While many different static binary rewriting tools have been proposed, most rely on recovering control flow information from the input binary. The recovery step is necessary since the rewriting process may move instructions, meaning that the set of jump targets in the rewritten binary needs to be adjusted accordingly. Since the static recovery of control flow information is a hard problem in general, most tools rely on a set of simplifying heuristics or assumptions, such as specific compilers, specific source languages, or binary file meta information. However, the reliance on assumptions or heuristics tends to scale poorly in practice, and most state-of-the-art static binary rewriting tools cannot handle very large/complex programs such as web browsers. In this paper we present E9Patch, a tool that can statically rewrite x86-64 binaries without any knowledge of control flow information. To do so, E9Patch develops a suite of binary rewriting methodologies - -such as instruction punning, padding, and eviction - -that can insert jumps to trampolines without the need to move other instructions. Since this preserves the set of jump targets, the need for control flow recovery and related heuristics is eliminated. As such, E9Patch is robust by design, and can scale to very large (>100MB) stripped binaries including the Google Chrome and FireFox web browsers. We also evaluate the effectiveness of E9Patch against realistic applications such as binary instrumentation, hardening and repair.
Source Title: PLDI '20: 41st ACM SIGPLAN International Conference on Programming Language Design and Implementation
URI: https://scholarbank.nus.edu.sg/handle/10635/184221
ISBN: 9781450376136
DOI: 10.1145/3385412.3385972
Appears in Collections:Staff Publications
Elements

Show full item record
Files in This Item:
File Description SizeFormatAccess SettingsVersion 
PLDI20.pdfAccepted version847.72 kBAdobe PDF

CLOSED

Published

SCOPUSTM   
Citations

2
checked on Jul 22, 2021

Page view(s)

94
checked on Jul 23, 2021

Download(s)

5
checked on Jul 23, 2021

Google ScholarTM

Check

Altmetric


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.