Patent ID: 7945953
Filing Date: 2011-05-17
Classification: G06F

Abstract:
1. A computer system implemented method for blocking a buffer overflow comprising: a computer system; a memory associated with the computer system; a processor associated with the computer system, the processor associated with the computer system executing instructions for implementing at least part of the computer system implemented method for blocking a buffer overflow, the computer system implemented method for blocking a buffer overflow comprising: stalling a call to a critical operating system (OS) function, said call to a critical operating system (OS) function being made by a critical call initiating function residing in the memory associated with the computer system; determining whether a value of a return address of said critical call initiating function points to a location in said memory associated with the computer system that corresponds to a location in a Thread Environment Block (TEB) or a Process Environment Block (PEB) of said memory associated with the computer system; taking protective action to protect the computer system upon a determination that said return address of said critical call initiating function does point to a location in a Thread Environment Block (TEB) or a Process Environment Block (PEB) of said memory associated with the computer system; and allowing said call to a critical operating system (OS) function to proceed upon a determination that said return address of said critical call initiating function does not point to a location in a Thread Environment Block (TEB) or a Process Environment Block (PEB) of said memory associated with the computer system.