DYNAMIC SUBROUTINE STACK PROTECTION

摘要

A protection unit of a subroutine stack accessible by a CPU controlled by one main software program, for storing and removing stack frame(s), the stack protection unit being coupleable to the stack and the CPU, comprising:
a processor coupled to a first and a second address register;

wherein, when a first stack frame is stored onto the stack and the execution of the main software program is suspended by the CPU due to the execution of a subroutine;
the processing unit is adapted to set one access rule based on the first and second address registers, preventing:
the ongoing subroutine, from accessing a hardware-protected region of the stack, comprising at least one stack frame associated with a return address from which the main software program resumes execution after termination of the execution of the subroutine.;A processor, a method and a computer program are also claimed.

主权项

1. A protection unit for preventing unauthorized access to at least part of a Last In-First Out memory, referred to as stack, the stack having memory addresses extending between a top address and a bottom address, the stack being accessible by a central processing unit, of a computer system, such as a central processor, CPU, for storing and removing at least one stack frame, the CPU being controllable by one main software program, the stack protection unit being operably coupleable to the stack and the CPU, the stack protection unit comprising:
a first and a second address register each adapted to store an address of the stack; and, a processing unit such as a processor operably coupled to the first and second address registers; wherein, when the execution of the main software program is suspended by the CPU due to the execution of at least one subroutine of the main software program; the processing unit is adapted to set at least one access rule based on at least the first and second address registers, preventing:
the ongoing subroutine from accessing at least a first hardware-protected region of the stack, the first hardware-protected region comprising at least one stack frame associated with a return address from which the main software program resumes execution after termination of the execution of the subroutine.