Vulnerability detection method and device

A vulnerability detection device comprising at least one processor configured to implement:

• a program obtaining unit configured to obtain a target test program, wherein the target test program comprises system calls and first input parameters corresponding to the system calls required for normal running of a device driver, and the system calls are arranged based on a calling relationship for the normal running of the device driver;
• a sequence obtaining unit configured to obtain a sequence to be inserted, wherein the sequence to be inserted comprises at least one system call;
• a mutating unit configured to mutate the target test program based on the sequence to be inserted and second input parameters corresponding to the sequence to be inserted by randomly inserting the sequence to be inserted and/or the second input parameters into the target test program;
• and
• a detecting unit configured to detect a vulnerability of the device driver, based on running information about the device driver obtained during execution of the mutated target test program,
• wherein, prior to the mutating the target test program, the mutating unit is further configured to:
• randomly generate the second input parameters corresponding to the sequence to be inserted based on parameter types required for the sequence to be inserted;
• or
• obtain preset parameters that conform to the parameter types required for the sequence to be inserted as the second input parameters corresponding to the sequence to be inserted.

A non-transitory computer-readable storage medium storing instructions that, when executed by at least one processor, cause the at least one processor to:

• obtain a target test program comprising:
• system calls, and
• first input parameters corresponding to the system calls required for normal running of a device driver,
• wherein the system calls are arranged based on a calling relationship for the normal running of the device driver;
• obtain a sequence to be inserted, wherein the sequence to be inserted comprises at least one system call;
• mutate the target test program based on the sequence to be inserted and second input parameters corresponding to the sequence to be inserted by randomly inserting the sequence to be inserted and/or the second input parameters into the target test program;
• and
• detect a vulnerability of the device driver based on running information about the device driver obtained during execution of the mutated target test program,
• wherein the instructions, when executed, further cause the at least one processor to, prior to mutating the target test program:
• randomly generate the second input parameters corresponding to the sequence to be inserted based on parameter types required for the sequence to be inserted;
• or
• obtain preset parameters that conform to the parameter types required for the sequence to be inserted as the second input parameters corresponding to the sequence to be inserted.