SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR MONITORING AN EXECUTION FLOW OF A FUNCTION

摘要

A system, method, and computer program product are provided for monitoring an execution flow of a function. In use, data associated with a function is identified within a call stack. Additionally, a call stack frame is determined from freed memory in the call stack. Further, an execution flow of the function is monitored, utilizing the call stack frame from the freed memory.

主权项

1. One or more non-transitory computer readable media comprising instructions stored thereon that when executed cause a programmable device to:
identify data associated with a function within a call stack; determine a former call stack frame from an area of memory outside the call stack, wherein the former call stack frame includes memory that was previously popped off the call stack; and determine whether the former call stack frame has been compromised.