WO2017008431A1

WO2017008431A1 - Compiling method and device for program linking

Info

Publication number: WO2017008431A1
Application number: PCT/CN2015/096591
Authority: WO
Inventors: 谢宝友; 王德强
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-07-16
Filing date: 2015-12-07
Publication date: 2017-01-19
Also published as: CN106708593B; CN106708593A

Abstract

Provided are a compiling method and device for program linking, the compiling method comprising: obtaining a file to be linked, and splitting, according to a function or variable symbol in the file, sections in the file to obtain a plurality of input sections (S10); randomly assigning an index value to each of the input sections (S11); and merging, according to the index value of each of the input sections, the corresponding function or variable symbol into a link output file (S12). The compiling method for program linking can further improve randomness of a function and variable symbol in a program by splitting the function and variable symbol in a file and then performing randomization thereon, thereby reducing a possibility of a program being successfully attacked, and improving program security.

Description

Program link compiling method and device

Technical field

The present invention relates to the field of computer technologies, and in particular, to a method and apparatus for compiling a program link.

Background technique

With the rapid development of information technology, communication using a widely open network environment has become a trend of the times. While the network provides development and shared resources, there are inevitably security risks. If there are loopholes in the computer software system (operating system, shared libraries, middleware, and applications), attackers familiar with the system can exploit these vulnerabilities through the network. To execute malicious code and perform illegal operations.

One premise of attacking the system is that the attacker has a certain understanding of the spatial distribution of the code address of the system, especially the program, and then the carefully constructed code allows the process to execute the attack code preset by the attacker to control the system. In response to this attack, address randomization is generally used for protection. After the software code address is randomized, the attacker cannot jump to the expected address to execute the attack code, thus effectively reducing the probability of the attacker's attack success. FIG. 1 is a schematic diagram of a process state of randomly assigning a program address in the prior art, and the code section Fun1 of the input file is shown.

Func2, Func3, and Func4 are merged into the code section of the output file, and the data sections Var1, Var2, Var3, and Var4 of the input file are merged into the data section of the output file.

Traditional address randomization is usually done at the system level. When the system starts the program, the base address of each component (main program, dynamic library, stack) in the program is randomized. Although the randomization process is simple and the overhead is small, the following problems exist: The granularity is coarse, and the address distribution inside the component is still fixed. The attacker can still invoke the operating system interface to obtain the starting address of each component, and combine the brute force crack and the relative address to implement the attack. Because of the large amount of open source code used in commercial projects, attackers can use pre-compiled programs to obtain the address distribution within these open source code components. 2 is not flexible enough, or all programs in the system use address randomization, or do not use address randomization, can not open this function according to the application's own characteristics and security requirements. 3 The selection of random numbers is determined by the system. The generation of some random numbers is also related to the system time. The attacker can easily crack after obtaining the random number generation rules and system time of the system.

Summary of the invention

An object of the embodiments of the present invention is to provide a method and a device for compiling a program link, which can be further improved. The randomness of the function and variable symbols in the program, which reduces the possibility of the program being successfully attacked and improves the security of the program.

In order to achieve the above object, an embodiment of the present invention provides a method for compiling a program link, where the compiling method includes:

Obtaining a file to be linked, splitting a section in the file to be linked according to a function or a variable symbol in the file to be linked, and obtaining a plurality of input sections;

Randomly assigning an index value to each of the input sections;

The corresponding function or variable symbol is merged into a linked output file according to the index value of each of the input sections.

Optionally, the section in the file to be linked is split according to a function or a variable symbol in the file to be linked, and multiple input sections are obtained, which specifically includes:

Reading symbol table information of a currently processed section in the file to be linked;

According to the symbol table information, searching for a function or a variable symbol of the currently processed section, sequentially selecting a preset number of functions or variable symbols in the currently processed section as a group, creating a new section for each group, obtaining and current Processing a plurality of the input sections corresponding to the sections.

Optionally, the method sequentially selects a preset number of functions or variable symbols in the currently processed section as a group, and after creating a new section for each group, the method further includes:

Reading all the section information in the file to be linked, determining whether all the sections in the file to be linked are split, and when not splitting, continuing to read the symbol of the next unprocessed section in the file to be linked Table information, which in turn selects a preset number of functions or variable symbols in the next unprocessed section as a group, creates a new section for each group, and obtains a plurality of the input sections;

A preset number of functions or variable symbols in each unprocessed section is selected in turn as a group, and a new section is created for each group to obtain a plurality of the input sections.

Optionally, the randomly assigning an index value to each of the input sections includes:

Obtaining a numerical parameter of a plurality of random events, and generating a random seed according to the numerical parameter, where the random event includes: an interruption of the current compiled host, a current user terminal input, or a system time of reading the currently compiled host, correspondingly, The numerical parameters include: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

Generating a random sequence based on the random seed;

Obtaining each of the input sections after the split in the file to be linked, and assigning an index value to each of the split sections after the split according to the random sequence.

Optionally, the assigning an index value to each of the input sections after the split according to the random sequence includes:

Selecting an index value for the currently input section;

Detecting whether an index value selected for the current input section has been used, and if it has been used, calling the random sequence again to assign a new index value to the input section;

If the index value selected for the currently described input section is not used, the selected index value is marked for use and the selected index value is assigned to the corresponding input section.

Optionally, the corresponding function or variable symbol is combined into a link output file according to the index value of each of the input sections, specifically:

Determining an offset address of the input section in the link output file according to an index value of the input section, and combining the input section to a determined location in the link output file according to the offset address.

The embodiment of the invention further provides a program linking device, the compiling device comprising:

a processing module, configured to obtain a file to be linked, and split a section in the file to be linked according to a function or a variable symbol in the file to be linked to obtain a plurality of input sections;

An allocation module configured to randomly assign an index value to each of the input sections;

The merging module is configured to merge the corresponding function or variable symbol into a link output file according to the index value of each of the input sections.

Optionally, the processing module includes:

Reading a sub-module, configured to read symbol table information of a currently processed section in the file to be linked;

Create a sub-module, set to find a function or a variable symbol of the currently processed section according to the symbol table information, and sequentially select a preset number of functions or variable symbols in the currently processed section as a group, and create a new one for each group. Section, obtaining a plurality of said input sections corresponding to the currently processed section.

Optionally, the processing module further includes:

a first processing submodule, configured to sequentially select a preset number of functions or variable symbols in the currently processed section as a group in the creating submodule, and after creating a new section for each group, reading the to-be-linked file All the section information in the middle, determining whether all the sections in the file to be linked are split, and when the splitting is completed, continuing to read The symbol table information of the next unprocessed section in the file to be linked, sequentially selects a preset number of functions or variable symbols in the next unprocessed section as a group, creates a new section for each group, and obtains a plurality of the input sections. ;

The second processing sub-module is configured to sequentially select a preset number of functions or variable symbols in each unprocessed section as a group, create a new section for each group, and obtain a plurality of the input sections.

Optionally, the allocation module includes:

The first generating submodule is configured to obtain a numerical parameter of the plurality of random events, and generate a random seed according to the numerical parameter, where the random event includes: the current compiled host is interrupted, the current user terminal inputs or reads the currently compiled host The system time, correspondingly, the numerical parameter includes: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

a second generation submodule, configured to generate a random sequence according to the random seed;

And an allocation sub-module, configured to acquire each of the input sections after the splitting in the file to be linked, and assign an index value to each of the split sections after the split according to the random sequence.

Optionally, the allocation submodule includes:

The selected subunit is set to select an index value for the currently input section;

a first processing sub-unit, configured to detect whether an index value selected for the current input section has been used, and if it has been used, again calling the random sequence to assign a new index value to the input section;

a second processing sub-unit, configured to flag the selected index value to be used if the index value selected for the current input section is not used, and assign the selected index value to the corresponding input section .

Optionally, the merging module is further configured to:

The beneficial effects of the above technical solutions of the embodiments of the present invention are as follows:

By selecting a preset number of functions or variable symbols as a group in each section of the file to be linked, a new section is created for each group, and a plurality of input sections are obtained, and each input section is obtained according to a pre-generated random sequence. Randomly assigning the index value and merging the corresponding function or variable symbol into a link output file according to the index value, can further improve the randomness of the function and the variable symbol in the program, thereby reducing the possibility that the program is successfully attacked, and improving the program. Security.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic diagram of a process state of randomly assigning a program address in the prior art;

2 is a schematic diagram of steps of a method for compiling a program link according to an embodiment of the present invention;

3 is a schematic diagram showing a process state of randomly assigning a program address after adopting the method of the embodiment of the present invention;

4 is a schematic diagram of a process of splitting a section in a file to be linked according to an embodiment of the present invention;

FIG. 5 is a schematic flowchart of a random allocation index according to an embodiment of the present invention; FIG.

6 is a schematic overall flow chart of a method for compiling a program link according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a device for compiling a program link according to an embodiment of the present invention.

detailed description

The technical problems, the technical solutions, and the advantages of the present invention will be more clearly described in the following description.

An embodiment of the present invention provides a method for compiling a program link. As shown in FIG. 2, the compiling method includes:

Step S10: Obtain a file to be linked, and split a section in the file to be linked according to a function or a variable symbol in the file to be linked to obtain a plurality of input sections;

Step S11: Randomly assign an index value to each of the input sections;

Step S12: Combine the corresponding function or variable symbol into a link output file according to the index value of each of the input sections.

After the file to be linked is obtained, the sections of the file to be linked are split to obtain the input section after the split, and the number of functions or variable symbols included in the input section obtained after the split is smaller than the function or variable symbol in the original section. The number of functions or variable symbols in the input section after splitting can be preset. The smaller the number of functions or variable symbols in the input section, the greater the number of input sections that are split. The fewer the number of functions or variable symbols in the input section, the more the number of input sections, the function or variable when the index value is randomly assigned to each input section. The greater the randomness of the number, the lower the probability that the program will be successfully attacked, thereby improving the security of the program. After obtaining the split input sections, the index values need to be randomly assigned to the input section, and then the corresponding function or variable symbol is merged into a link output file according to the index value of each input section.

As shown in FIG. 3, a schematic diagram of a process state of randomly assigning a program address after adopting the method of the embodiment of the present invention splits the merged code sections Func1 and Func2 of the input file into independent Func1 and Func2; the merged code section Func3 Func4 is split into independent Func3 and Func4; the merged data sections Var1 and Var2 of the input file are split into independent Var1 and Var2; the merged data sections Var3 and Var4 are split into independent Var3 and Var4. Finally, the code sections Func1, Func2, Func3, and Func4 in the input file are merged into the code section of the output file, and the data sections Var1, Var2, Var3, and Var4 of the input file are merged into the data section of the output file.

In the above-mentioned embodiment of the present invention, the step S10 splits the sections in the file to be linked according to the function or the variable symbol in the file to be linked, and obtains a plurality of input sections, which specifically includes:

Step S101: Read symbol table information of a currently processed section in the file to be linked;

Step S102: Searching for a function or a variable symbol of a currently processed section according to the symbol table information, sequentially selecting a preset number of functions or variable symbols in the currently processed section as a group, and creating a new section for each group, obtaining A plurality of said input sections corresponding to the currently processed sections.

Specifically, when the section in the link file is split, the symbol table information of the currently processed section in the file to be linked is first read, and the corresponding function or variable symbol is found according to the obtained symbol table information. Then, the currently processed sections are split. When splitting, the function or variable symbol of the currently processed section is grouped according to the number of functions or variable symbols included in each group set in advance, and then for each group. Create a new section and get multiple input sections.

In the above embodiment of the present invention, step S102 sequentially selects a preset number of functions or variable symbols in the currently processed section as a group, and after creating a new section for each group, the method further includes:

Step S103: Read all the section information in the file to be linked, and determine whether all the sections in the file to be linked are split. If the split is not completed, continue to read the next unprocessed file in the to-be-linked file. The symbol table information of the section, which in turn selects the preset number of functions or variable symbols in the next unprocessed section as a group, for each The group creates a new section and obtains a plurality of the input sections;

Step S104: sequentially select a preset number of functions or variable symbols in each unprocessed section as a group, create a new section for each group, and obtain a plurality of the input sections.

Specifically, after splitting the currently processed section into multiple input sections, it is necessary to determine whether all the sections in the file to be linked have been split, and judged according to all the section information in the file to be linked. . If it is not split, you need to read the symbol table information of the next unprocessed section in the file to be linked, and select a preset number of functions or variable symbols as a group in the next unprocessed section to create a new one for each group. Section, get multiple input sections. After the next unprocessed section is split, you need to continue to split the remaining unprocessed sections in the linked file until all unprocessed sections have been split. During the splitting process, the functions or variable symbols contained in each group are pre-set, and the number of functions or variable symbols contained in each group can be changed according to the security requirements of the program. The fewer the number of functions or variable symbols contained in a group, the greater the randomness of the function and variable symbols in the program, and the lower the probability that the program will be successfully attacked, which can improve the security of the program.

As shown in FIG. 4, it is a schematic diagram of a process of splitting a section in a file to be linked according to an embodiment of the present invention:

Step S201: Obtain information about all files to be linked;

Step S202: determining whether all the files to be linked are processed, and if the processing is completed, ending the process; if not, the process proceeds to the next step;

Step S203, reading section information and symbol table information of the file to be linked;

Step S204, it is determined whether all the sections of the file to be linked are processed; if the processing is completed, the process returns to step S202, and if not, the process proceeds to step S205;

Step S205, searching for all symbols located in the section, where the symbols may be functions or variable symbols;

In step S206, it is determined whether the symbol of the section is processed. If the processing is completed, the process proceeds to step S208 to delete the section; if not, the process proceeds to step S207 to create a new section for the symbol.

In the above embodiment of the present invention, step S11 randomly assigns an index value to each of the input sections, specifically including:

Step S110: Acquire a numerical parameter of a plurality of random events, and generate a random seed according to the numerical parameter, where the random event includes: a current compiled host interrupt, a current user terminal input, or a system time of reading the currently compiled host, corresponding The numerical parameter includes: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

Step S111, generating a random sequence according to the random seed;

Step S112: Obtain each input section that is split in the file to be linked, and assign an index value to each of the split sections after the split according to the random sequence.

Specifically, first, the numerical parameters of the plurality of random events are obtained, and then the random seed is generated according to the obtained numerical parameters, and then the random sequence is generated according to the random seed. After obtaining a random sequence, according to a random sequence

Assign an index value to each input section after splitting. Specifically, an index value is assigned to a function or a variable symbol in an input section. The input section may include a function or a variable symbol, and may also include multiple functions or variable symbols. It should be noted that multiple functions or variables herein are included. The number of symbols is less than the number of functions or variable symbols contained in the section of the file to be linked. When the input section contains only one function or variable symbol, the section split in the file to be linked is the most thorough, and a function or variable symbol corresponds to an index value. At this time, the randomness of the function and variable symbol in the program is corresponding. As the number increases, the probability of a successful attack on the program decreases, and the security of the program increases. When the input section contains three functions or variable symbols, compared to the input section containing only one function or variable symbol, the randomness of the function and variable symbols in the program is reduced accordingly, and the possibility of the program being successfully attacked It will increase, and the security of the program will be relatively weak. At this time, a set of three functions or variable symbols corresponds to an index value.

In the above embodiment of the present invention, the step S112 assigns an index value to each of the input sections after the split according to the random sequence, which specifically includes:

Selecting an index value for the currently input section;

Specifically, an index value is first selected for the current input section, and then the selected index value is detected to determine whether the currently selected index value has been used. If the detection result indicates that the selected index value has been used, Then, the random sequence needs to be called to assign a new index value to the current input section; if the detection result indicates that the selected index value is not used, the selected index value needs to be marked, indicating that the selected index value is already occupied. Avoid the use of this index value by other input sections and assign the selected index value to the current input section.

As shown in FIG. 5, it is a schematic flowchart of randomly assigning an index according to an embodiment of the present invention;

Step S301: Statistics information of all output sections;

Step S302, determining whether the output section is processed, and if the processing is completed, ending the process; otherwise, proceeding to the next step;

Step S303, reading information of all input sections corresponding to the output section, and performing number statistics;

Step S304, determining whether all the input sections have been processed, and if the processing is completed, returning to step S302 of determining whether the output section has been processed, if not, then proceeding to step S305;

Step S305, generating a corresponding number of random numbers;

Step S306, selecting a random number, and determining whether the selected random number has been allocated to other input sections, and if yes, continuing to generate a new random number, if not, proceeding to the next step;

Step S307, the random number is used as an index of the current input section, and then returns to step S304 of determining whether all the input sections have been processed.

In the above embodiment of the present invention, step S12 is specifically:

Specifically, when the corresponding function or variable symbol is merged into a link output file, it is first necessary to determine an index value corresponding to the input section where the corresponding function or variable symbol is located, and determine the input section in the link output according to the corresponding index value. The offset address in the file, and then according to the offset address, the input section, specifically the function or variable symbol in the input section is merged into a certain position in the link output file.

FIG. 6 is a schematic diagram showing the overall flow of a method for compiling a program link according to an embodiment of the present invention:

Step S401, re-split the section in the file to be linked, and ensure that there are only a small number of functions or variable symbols in a section, and the rules for ensuring the join are unchanged;

A small number of functions or variable symbols are compared with the original section. The number of functions or variable symbols contained in each section after splitting is smaller than the number of functions or variable symbols in the original section. Further, splitting The fewer the number of functions or variable symbols included in the following sections, the greater the security of the program.

Step S402, establishing an index and performing randomization processing on all input sections that need to be merged into the same output section;

Step S403, after determining the index of each input section, confirm the offset of each input section in the output section according to the index value and the sorting size of all the index values;

Step S404, merge all input sections into the output section, and end the process.

An embodiment of the present invention provides a device for compiling a program. As shown in FIG. 7, the compiling device includes:

The processing module 20 is configured to obtain a file to be linked, and split a section in the file to be linked according to a function or a variable symbol in the file to be linked to obtain a plurality of input sections;

An allocating module 30, configured to randomly assign an index value to each of the input sections;

The merging module 40 is configured to merge the corresponding function or variable symbol into a link output file according to the index value of each of the input sections.

In the above embodiment of the present invention, the processing module 20 includes:

The reading sub-module 21 is configured to read symbol table information of a currently processed section in the file to be linked;

The creating sub-module 22 is configured to search for a function or a variable symbol of the currently processed section according to the symbol table information, and sequentially select a preset number of functions or variable symbols in the currently processed section as a group, and create for each group. In the new section, a plurality of said input sections corresponding to the currently processed sections are obtained.

In the above embodiment of the present invention, the processing module 20 further includes:

The first processing sub-module 23 is configured to sequentially select, in the creating sub-module 22, a preset number of functions or variable symbols in the currently processed section as a group, and after creating a new section for each group, reading the waiting Linking all the section information in the file, determining whether all the sections in the file to be linked are split, and when the splitting is completed, continuing to read the symbol table information of the next unprocessed section in the file to be linked, and sequentially selecting Determining a preset number of functions or variable symbols in an unprocessed section as a group, creating a new section for each group, obtaining a plurality of said input sections;

The second processing sub-module 24 is arranged to sequentially select a preset number of functions or variable symbols in each unprocessed section as a group, create a new section for each group, and obtain a plurality of the input sections.

In the above embodiment of the present invention, the distribution module 30 includes:

The first generation sub-module 31 is configured to acquire a numerical parameter of a plurality of random events, and generate a random seed according to the numerical parameter, where the random event includes: an interruption of the current compiled host, a current user terminal input, or a current compilation The system time of the host, correspondingly, the numerical parameter includes: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

a second generation submodule 32, configured to generate a random sequence according to the random seed;

The distribution sub-module 33 is configured to acquire each of the input sections after the split in the file to be linked, and assign an index value to each of the split sections after the split according to the random sequence.

In the above embodiment of the present invention, the distribution sub-module 33 includes:

The selected subunit 331 is configured to select an index value for the current input section;

The first processing sub-unit 332 is configured to detect whether the index value selected for the current input section has been used, and if it has been used, call the random sequence again to allocate a new index value to the input section;

The second processing sub-unit 333 is configured to mark the selected index value as used if the index value selected for the current input section is not used, and assign the selected index value to the corresponding input Section.

In the above embodiment of the present invention, the merging module 40 is further configured to:

The compiling method of the program link in the embodiment of the present invention, by sequentially selecting a preset number of functions or variable symbols as a group in each section of the file to be linked, creating a new section for each group, obtaining a plurality of input sections, according to the advance The generated random sequence is randomly assigned an index value for each input section, and the corresponding function or variable symbol is merged into a link output file according to the index value, thereby further improving the randomness of the function and the variable symbol in the program, thereby reducing the randomness. The possibility that the program is successfully attacked, improving the security of the program.

It should be noted that the device for compiling the program link provided by the embodiment of the present invention is the device applying the above method, and all the embodiments of the foregoing method are applicable to the device, and all of the same or similar beneficial effects can be achieved.

The above is a preferred embodiment of the present invention, and it should be noted that those skilled in the art can also make several improvements and retouchings without departing from the principles of the present invention. It should be considered as the scope of protection of the present invention.

Industrial applicability

In the embodiments of the present invention, a preset number of functions or variable symbols are sequentially selected as a group in each section of the file to be linked, and a new section is created for each group, and multiple input sections are obtained, according to the pre-generated random sequence. Each input section randomly allocates an index value, and combines the corresponding function or variable symbol into a link output file according to the index value, thereby further improving the randomness of the function and the variable symbol in the program, thereby reducing the possibility that the program is successfully attacked. Sex, improve the security of the program.

Claims

A method for compiling a program link, the compilation method comprising:

Obtaining a file to be linked, splitting a section in the file to be linked according to a function or a variable symbol in the file to be linked, and obtaining a plurality of input sections;

Randomly assigning an index value to each of the input sections;

The corresponding function or variable symbol is merged into a linked output file according to the index value of each of the input sections.
The method of claim 1, wherein the splitting the sections in the file to be linked according to a function or a variable symbol in the file to be linked, to obtain a plurality of input sections, specifically includes:

Reading symbol table information of a currently processed section in the file to be linked;

According to the symbol table information, searching for a function or a variable symbol of the currently processed section, sequentially selecting a preset number of functions or variable symbols in the currently processed section as a group, creating a new section for each group, obtaining and current Processing a plurality of the input sections corresponding to the sections.
The method of claim 2, wherein the sequentially selecting a preset number of functions or variable symbols in the currently processed section as a group, after creating a new section for each group, the method further comprises:

Reading all the section information in the file to be linked, determining whether all the sections in the file to be linked are split, and when not splitting, continuing to read the symbol of the next unprocessed section in the file to be linked Table information, which in turn selects a preset number of functions or variable symbols in the next unprocessed section as a group, creates a new section for each group, and obtains a plurality of the input sections;

A preset number of functions or variable symbols in each unprocessed section is selected in turn as a group, and a new section is created for each group to obtain a plurality of the input sections.
The method of claim 1, wherein the randomly assigning an index value to each of the input sections comprises:

Obtaining a numerical parameter of a plurality of random events, and generating a random seed according to the numerical parameter, where the random event includes: an interruption of the current compiled host, a current user terminal input, or a system time of reading the currently compiled host, correspondingly, The numerical parameters include: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

Generating a random sequence based on the random seed;

Obtaining each of the input sections after splitting in the file to be linked, and splitting according to the random sequence Each of the subsequent input sections is assigned an index value.
The method of claim 4, wherein the assigning an index value to each of the input sections after the split according to the random sequence comprises:

Selecting an index value for the currently input section;

Detecting whether an index value selected for the current input section has been used, and if it has been used, calling the random sequence again to assign a new index value to the input section;

If the index value selected for the currently described input section is not used, the selected index value is marked for use and the selected index value is assigned to the corresponding input section.
The method of claim 1, wherein the respective functions or variable symbols are combined into a link output file according to the index value of each of the input sections, specifically:

Determining an offset address of the input section in the link output file according to an index value of the input section, and combining the input section to a determined location in the link output file according to the offset address.
A program linking compiling device, the compiling device comprising:

a processing module, configured to obtain a file to be linked, and split a section in the file to be linked according to a function or a variable symbol in the file to be linked to obtain a plurality of input sections;

An allocation module configured to randomly assign an index value to each of the input sections;

The merging module is configured to merge the corresponding function or variable symbol into a link output file according to the index value of each of the input sections.
The apparatus of claim 7 wherein said processing module comprises:

Reading a sub-module, configured to read symbol table information of a currently processed section in the file to be linked;

Create a sub-module, set to find a function or a variable symbol of the currently processed section according to the symbol table information, and sequentially select a preset number of functions or variable symbols in the currently processed section as a group, and create a new one for each group. Section, obtaining a plurality of said input sections corresponding to the currently processed section.
The apparatus of claim 8 wherein said processing module further comprises:

a first processing submodule, configured to sequentially select a preset number of functions or variable symbols in the currently processed section as a group in the creating submodule, and after creating a new section for each group, reading the to-be-linked file All the section information in the middle, determining whether all the sections in the file to be linked are split, and when the splitting is completed, continuing to read the symbol table information of the next unprocessed section in the file to be linked, and then selecting the next One unprocessed a preset number of functions or variable symbols in a section as a group, creating a new section for each group, obtaining a plurality of the input sections;

The second processing sub-module is configured to sequentially select a preset number of functions or variable symbols in each unprocessed section as a group, create a new section for each group, and obtain a plurality of the input sections.
The apparatus of claim 7 wherein said assigning module comprises:

The first generating submodule is configured to obtain a numerical parameter of the plurality of random events, and generate a random seed according to the numerical parameter, where the random event includes: the current compiled host is interrupted, the current user terminal inputs or reads the currently compiled host The system time, correspondingly, the numerical parameter includes: the number of times the current compiled host is interrupted, the value input by the current user terminal, or the system time value of the currently compiled host that is read;

a second generation submodule, configured to generate a random sequence according to the random seed;

And an allocation sub-module, configured to acquire each of the input sections after the splitting in the file to be linked, and assign an index value to each of the split sections after the split according to the random sequence.
The apparatus of claim 10 wherein said assigning sub-module comprises:

The selected subunit is set to select an index value for the currently input section;

a first processing sub-unit, configured to detect whether an index value selected for the current input section has been used, and if it has been used, again calling the random sequence to assign a new index value to the input section;

a second processing sub-unit, configured to flag the selected index value to be used if the index value selected for the current input section is not used, and assign the selected index value to the corresponding input section .
The apparatus of claim 7 wherein said merging module is further configured to:

Determining an offset address of the input section in the link output file according to an index value of the input section, and combining the input section to a determined location in the link output file according to the offset address.