Codepath integrity checking

摘要

A method and apparatus for testing code is provided. The method includes inserting at least one token in program code, wherein each token comprises a code element able to provide a value during runtime, establishing a baseline code version and an executing code version from the program code, and subjecting the executing code version to various testing conditions using a processing device. Subjecting the executing code version to various testing conditions comprises periodically evaluating at least one executing code token having one associated executing error detection value against the at least one baseline code token having one associated baseline error detection value and reporting an error when at least one executing code token and associated executing error detection pair fails to match at least one baseline code token and associated baseline error detection pair.

主权项

1. A code testing method executable on a processing device, comprising:
inserting at least one token in program code, wherein each token comprises a code element able to provide a value during runtime and the token does not materially affect subsequent code functionality; establishing a baseline code version and an executing code version from the program code; subjecting the executing code version to various testing conditions using the processing device; detecting execution of the token; and performing additional analysis if the token is detected; wherein the additional analysis includes: evaluating at least one executing code token having one associated executing error detection value against the at least one baseline code token having one associated baseline error detection value, reporting an error when at least one executing code token and associated executing error detection pair fails to match at least one baseline code token and associated baseline error detection pair, and determining whether or not to continue code testing if an error condition is established, wherein the one associated executing error detection value and one associated baseline error detection value comprise at least one from a group consisting of a cyclic redundancy check (CRC) and a checksum.