Detecting heap and stack execution in the operating system using regions

No: 7484239
No. de la demande: 11000817
Date d'archivage: 2004-11-30
Date d'emission: 2009-01-27
Genre: B1
Pretentions: 20
Feuilles de dessin: 5
Resume: A call to a critical operating system function is stalled. The pregion and pregion type associated with the location of a call module originating the call is determined. In one embodiment, when the pregion type is either a stack or a heap pregion type, protective action is taken, such as terminating the call, otherwise the call is released. In another embodiment, when the pregion type is either a text or shared memory pregion type, the call is released, otherwise protective action is taken.
Inventeurs:
	Tester Jonathan  (2)
	Verma Sunita  (1)
Examinateur principal: Zand Kambiz
Examinateur adjoint: Jackson Jenise E
Agents:
	Gunnison, McKay & Hodgson, L.L.P. (ORG)  (267)
	Hodgson Serge J.  (80)
Cessionnaires:
	Symantec Corporation (ORG)  (133)
Domaine de recherches:
	No:164 - Security kernel or utility
Autre references:
	“HP-UX Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet: .
	“HP-UX Process Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-124 [online]. Retrieved from the Internet:.
	Szor, P., U.S. Appl. No. 10/681,623, filed Oct. 7, 2003 and entitled “Unmapped Code Blocking System and Method”.
	“Memory Management White Paper, Version 1.3”, Hewlett-Packard Company, Apr. 7, 1997, pp. 1-116 [online]. Retrieved from the Internet:.
References:
	6412071 - Method for secure function execution by calling address validation