{"id":116371,"date":"2024-06-05T21:39:49","date_gmt":"2024-06-05T19:39:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-opublikoval-gwpsan-instrument-dlya-vyyavleniya-oshibok-na-stadii-vypolneniya-prilozhenij"},"modified":"2024-06-05T21:39:49","modified_gmt":"2024-06-05T19:39:49","slug":"google-opublikoval-gwpsan-instrument-dlya-vyyavleniya-oshibok-na-stadii-vypolneniya-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-opublikoval-gwpsan-instrument-dlya-vyyavleniya-oshibok-na-stadii-vypolneniya-prilozhenij","title":{"rendered":"Google publikoi GWPSan, nj\u00eb mjet p\u00ebr identifikimin e gabimeve n\u00eb faz\u00ebn e ekzekutimit t\u00eb aplikacioneve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Google publikoi tekstet e burimit t\u00eb GWPSan, nj\u00eb mjet q\u00eb synon t\u00eb identifikoj\u00eb gabimet gjat\u00eb ekzekutimit t\u00eb aplikacioneve t\u00eb nd\u00ebrtuara p\u00ebr arkitektur\u00ebn x86-64 dhe ARM64. GWPSan nd\u00ebrtohet si nj\u00eb bibliotek\u00eb e ndar\u00eb, e cila lidhet gjat\u00eb ekzekutimit t\u00eb aplikacionit p\u00ebrmes LD_PRELOAD dhe p\u00ebrdor mekanizmat e ndalimit (PERF_TYPE_BREAKPOINT) dhe sample-imit t\u00eb proceseve t\u00eb disponuesh\u00ebm n\u00eb b\u00ebrtham\u00ebn Linux p\u00ebr t\u00eb analizuar pun\u00ebn e programit. Kodi \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C++ dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
GWPSan \u00ebsht\u00eb nd\u00ebrtuar si nj\u00eb framework modular q\u00eb mb\u00ebshtet lidhjen e moduleve me implementimin e detektor\u00ebve t\u00eb klasave t\u00eb ndryshme t\u00eb gabimeve. GWPSan kryen analiz\u00eb dinamike, e aktivizuar p\u00ebrmes trajtuesve t\u00eb sinjal\u00ebve, duke lejuar k\u00ebshtu q\u00eb aplikacioni t\u00eb mos ndryshohet. P\u00ebr t\u00eb funksionuar si\u00e7 duhet, shumica e detektor\u00ebve k\u00ebrkojn\u00eb q\u00eb aplikacioni t\u00eb mbledh\u00eb me disa flamuj kompilator\u00ebsh q\u00eb shtojn\u00eb metadatat e nevojshme. Nevojitet t\u00eb pakt\u00ebn Clang 18 dhe b\u00ebrthama Linux 6.4. <\/p>\n
Aktualisht jan\u00eb t\u00eb disponuesh\u00ebm tre detektor\u00eb: <\/p>\n
\n
UAR (Use-after-return) \u2014 identifikon gabimet shkaktuar nga p\u00ebrdorimi i objekteve n\u00eb stack pas daljes nga funksioni, ku ky objekt \u00ebsht\u00eb p\u00ebrcaktuar. Mbrojtja organizohet p\u00ebrmes kapjes s\u00eb pikave t\u00eb hyrjes dhe daljes p\u00ebr funksionin \u2014 gjat\u00eb hyrjes b\u00ebhet z\u00ebvend\u00ebsimi i stack-ut me nj\u00eb kopje q\u00eb do t\u00eb p\u00ebrdoret gjat\u00eb ekzekutimit t\u00eb funksionit, nd\u00ebrsa gjat\u00eb daljes \u00ebsht\u00eb rikthyer gjendja e vjet\u00ebr e stack-ut.\n
TSan (Thread Sanitizer) \u2014 p\u00ebrcakton gjendjet e gar\u00ebs mes moduleve (Data-race), q\u00eb ndodhin kur disa module q\u00eb ekzekutohen n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb mund t\u00eb lexojn\u00eb ose modifikojn\u00eb zona t\u00eb p\u00ebrbashk\u00ebta memorjesh, pa p\u00ebrdorur primitivat p\u00ebr sinkronizimin e pun\u00ebs. Mbrojtja \u00ebsht\u00eb nd\u00ebrtuar mbi p\u00ebrdorimin e pikave t\u00eb ndalimit harduerike, t\u00eb lidhura me zonat e p\u00ebrbashk\u00ebta t\u00eb memorjes. Trajtuesi q\u00eb aktivizohet p\u00ebr nj\u00eb periudh\u00eb t\u00eb vog\u00ebl ndalon ekzekutimin e modulit n\u00eb momentin e qasjes n\u00eb memorie dhe gjat\u00eb k\u00ebsaj pezullimi kontrollon n\u00ebse ka ndodhur aktivizimi i nj\u00eb pike ndalimi p\u00ebr nj\u00eb modul tjet\u00ebr.\n
LMSan (Lightweight Memory Sanitizer) \u2014 identifikon p\u00ebrdorimin e t\u00eb dh\u00ebnave t\u00eb pa-inicializuara n\u00eb memorie. Detektori \u00ebsht\u00eb sh\u00ebnuar si eksperimental dhe nuk rekomandohet p\u00ebr t'u p\u00ebrdorur. <\/ul>\n
GWPSan analizon kodin e ekzekutuesh\u00ebm t\u00eb programit, duke p\u00ebrdorur framework-un DynamoRIO p\u00ebr t\u00eb dekoduar kodin maqinar n\u00eb instruksione abstrakte ISA, t\u00eb cilat m\u00eb pas ekzekutohen duke p\u00ebrdorur emulimin. P\u00ebrmes sinjaleve periodike nga nj\u00eb timer, thirret nj\u00eb trajtues i unifikuar, i cili gjat\u00eb \u00e7do thirrjeje ekzekuton nj\u00eb sasi t\u00eb caktuar instrukcionesh p\u00ebr rrjedh\u00ebn e analizuar. N\u00eb rast se gjat\u00eb ekzekutimit t\u00eb disa instrukcionesh t\u00eb caktuara identifikohen, aktivizohet nj\u00eb detektor specifik p\u00ebr k\u00ebto instruksione, p\u00ebr shembull, p\u00ebr instrukcionesh q\u00eb lidhen me memorien, aktivizohet detektori i gjendjeve t\u00eb gar\u00ebs. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"