Methods, Devices, and Systems for Control Flow Integrity

A method comprising:

• at a device including a memory unit for storing modified codes and a processor:
• loading the modified codes, wherein the modified codes are generated from instructions using a function, including by injecting a reset instruction to each address in a set of code addresses identified as accessible from more than one address;
• obtaining extracted instructions from the modified codes by applying a reverse function of the function to the modified codes, including forgoing applying the reverse function to the reset instruction at each address in the set of code addresses;
• and
• executing the extracted instructions.

A system comprising:

• a first device including an extended compiler unit, one or more memory units for storing one or more of instructions corresponding to compiled source codes and modified codes, and one or more first programs, stored in the one or more memory units, which, when executed by the extended compiler unit, cause the first device to:
• scan the instructions to identify a set of code addresses in the one or more memory units that is accessible from more than one address;
• generate the modified codes from the instructions using a function, including injecting a reset instruction to each address in the set of code addresses;
• and
• store the modified codes in the one or more memory units;
• and
• a second device including a processor, a memory unit for storing the modified codes, and one or more second programs stored in the memory unit, which, when executed by the processor, cause the second device to:
• load the modified codes, wherein the modified codes are generated from the instructions using the function, including by injecting the reset instruction to each address in the set of code addresses identified as accessible from more than one address;
• obtain extracted instructions from the modified codes by applying a reverse function of the function to the modified codes, including forgoing applying the reverse function to the reset instruction at each address in the set of code addresses;
• and
• execute the extracted instructions.