Method and apparatus for patching binary having vulnerability

A method of patching a binary having vulnerability, the method comprising:

• loading a first binary to be patched, into a memory;
• generating a second binary by patching so as to call a buffer size verification function instead of calling a vulnerable function of the first binary;
• and
• executing the buffer size verification function in advance of executing the vulnerable function when the second binary is executed and executing the vulnerable function after a buffer size of the vulnerable function is verified so as to automatically prevent a buffer overflow from occurring in the vulnerable function,
• wherein the generating of the second binary comprises:
• obtaining a maximum stack availability value of the vulnerable function by analyzing a caller block of the vulnerable function in the first binary;
• storing the maximum stack availability value in an execution setting file;
• and
• substituting a caller block of the buffer size verification function for the caller block of the vulnerable function.