A Framework for Automatic Exploit Generation for JIT Compilers
A Framework for Automatic Exploit Generation for JIT Compilers
复制标题
DOI：
10.1145/3465413.3488573
复制
发表时间：
2021-11
期刊：
影响因子：
--
通讯作者：
Xiyu Kang;S. Debray
中科院分区：
文献类型：
--
作者：
Xiyu Kang;S. Debray
本文提出了一个在JIT编译器中自动生成漏洞的框架，特别关注由动态代码（即JIT编译器在运行时生成的代码）触发的堆损坏漏洞。目的是帮助评估漏洞的严重性，从而帮助进行漏洞分类。该框架由两个组件组成：第一个组件从现有漏洞中提取利用原语的高级表示，第二个组件使用提取的原语构建针对新漏洞的漏洞。我们目前正在构建一个框架的原型实现，重点放在JavaScript JIT编译器上。据我们所知，这是第一个考虑对JIT编译器动态生成的代码进行自动利用生成的建议。
This paper proposes a framework for automatic exploit generation in JIT compilers, focusing in particular on heap corruption vulnerabilities triggered by dynamic code, i.e., code generated at runtime by the JIT compiler. The purpose is to help assess the severity of vulnerabilities and thereby assist with vulnerability triage. The framework consists of two components: the first extracts high-level representations of exploitation primitives from existing exploits, and the second uses the primitives so extracted to construct exploits for new bugs. We are currently building a prototype implementation of the framework focusing on JavaScript JIT compilers. To the best of our knowledge, this is the first proposal to consider automatic exploit generation for code generated dynamically by JIT compilers.