Window Canaries: Re-thinking Stack Canaries for Architectures with Register Windows

This paper presents Window Canaries, a novel approach to Stack Canaries for architectures with a register window that protects return addresses and stack pointers without the need of adding additional instruction to each potentially vulnerable function. Instead, placement and check of the canary wor...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on dependable and secure computing 2023-11, Vol.20 (6), p.1-11
Main Authors: Lehniger, Kai, Langendorfer, Peter
Format: Article
Language:English
Subjects:
Buffer overflows
Codes
Computer architecture
Hardware
Instruments
Performance evaluation
Programming
Register windows
Registers
stack buffer overflows
stack canaries
Xtensa architecture
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper presents Window Canaries, a novel approach to Stack Canaries for architectures with a register window that protects return addresses and stack pointers without the need of adding additional instruction to each potentially vulnerable function. Instead, placement and check of the canary word is moved to window exception handlers that are responsible to handle register window overflows and underflows. The approach offers low performance overhead while guaranteeing that return addresses are protected by stack buffer overflows without relying on a heuristic that decides which functions to instrument. The contributions of this paper are a complete implementation of the approach for the Xtensa LX architecture with register window option as well as a performance evaluation and discussion of advantages and drawbacks.
ISSN:1545-5971
1941-0018
DOI:10.1109/TDSC.2022.3230748