introspection-result-checking
To build the tool:
mkdir build
cd build
cmake ../
make
Setting up file to mark functions as sensitive:
Add all sensitive function names to a file, with one function name per line.
To run the tool:
-
dump llvm bitcode for further instrumentation
clang source.c -c -emit-llvm -
Dump llvm bitcode of response function
clang ../response_lib.c -c -emit-llvm -
Run llvm transformation pass to add guards into each sensitive function
opt -load ../build/lib/libresult-checking.so source.bc -insert-guards -sensitive-functions sensitive.txt -connectivity-level <con_level> -o protected.bc -
link bitcode from the previous step with the bitcode of external library containing an integrity checker function.
llvm-link protected.bc response_lib.bc -o protected.bc -
Compile resulting bitcode into a binary
clang -rdynamic protected.bc -o out