Automatic discovery of system integrity exposures in system code

A system for detecting vulnerabilities in system code, comprising:

• memory configured to store a program;
• and a processor, functionally coupled to the memory, the processor being responsive to computer-executable instructions contained in the program and operative to:
• analyze, by the processor, supervisor call routines and program call routines of the system code to determine the supervisor call routines and the program call routines that are available to a caller program, the caller program being an unauthorized program and having a program status word (PSW) key eight through fifteen;
• provide, by the processor, predefined input parameters of test cases for execution by each of the supervisor call routines and the program call routines in order to generate an output for analysis;
• and
• analyze, by the processor, the output to determine when at least one of the supervisor call routines and the program call routines performed a potential vulnerability action, the potential vulnerability action comprising:
• reading from fetch protected storage;
• writing to system key storage having a PSW key zero through seven;
• giving control to the caller program of a program call routine or a supervisor call routine in an authorized state;
• and attempting to access unallocated storage with an effective key zero through seven.

A computer program product for detecting vulnerabilities in system code on a computer, the computer program product comprising:

• a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
• analyzing, by the computer, supervisor call routines and program call routines of the system code to determine the supervisor call routines and the program call routines that are available to a caller program, the caller program being an unauthorized program and having a program status word (PSW) key eight through fifteen;
• providing, by the computer, predefined input parameters of test cases for execution by each of the supervisor call routines and the program call routines in order to generate an output for analysis;
• and
• analyzing the output to determine when at least one of the supervisor call routines and the program call routines performed a potential vulnerability action, the potential vulnerability action comprising:
• reading from fetch protected storage;
• writing to system key storage having PSW key zero through seven;
• giving control to the caller program of a program call routine or a supervisor call routine in an authorized state;
• and
• attempting to access unallocated storage with an effective key zero through seven.