System and method for call path enforcement

A system for including call path enforcement instructions in computer code, the system comprising:

• a processor;
• an insertion module configured to control the processor to insert instructions in the computer code wherein the inserted instructions include instructions to:
• maintain, during run-time, a first run-time call order for a sequence of function calls and an evolving value associated with the first run-time call order;
• transform a subset of function parameters associated with a protected function based on the first run-time call order and the evolving value prior to calling the protected function;
• generate a second run-time call order by re-calculating the sequence of function calls inside the protected function;
• and
• un-transform the subset of function parameters based on the second run-time call order and the evolving value inside the protected function.

A non-transitory computer-readable storage medium storing a computer program having program instructions which, when executed by a computing device, causes the computing device to perform steps comprising:

• tracking during run-time of the computer program a first run-time call order for a series of function calls in the computer program;
• maintaining an evolving value associated with the first run-time call order;
• transforming a subset of function parameters associated with a protected function in the computer program based on the first run-time call order and the evolving value prior to calling the protected function;
• calling the protected function;
• generating a second run-time call order by re-calculating the series of function calls inside the protected function;
• un-transforming the subset of function parameters based on the second run-time call order and the evolving value when inside the protected function;
• and
• executing the protected function based on the un-transformed parameters, wherein proper execution of the protected function occurs when the first run-time call order matches the second run-time call order.

A non-transitory computer-readable storage medium storing a computer program having instructions for controlling a processor to embed call path enforcement instructions in a compiled application, the instructions comprising:

• embedding instructions throughout the computer code wherein the embedded instructions include instructions to:
• maintain, during run-time, a first run-time call order for a sequence of function calls and an evolving value associated with the first run-time call order;
• transform a subset of function parameters associated with a protected function based on the first run-time call order and the evolving value prior to calling the protected function;
• generate a second run-time call order by re-calculating the sequence of function calls inside the protected function;
• and
• un-transform the subset of function parameters based on the second run-time call order and the evolving value inside the protected function.