引用本文:肖庆,宫云战,杨朝红,金大海,王雅文.一种路径敏感的静态缺陷检测方法.软件学报,2010,21(2):209-217
【打印本页】   【下载PDF全文】   查看/发表评论  【EndNote】   【RefMan】   【BibTex】
←前一篇|后一篇→ 过刊浏览    高级检索
本文已被:浏览 10733次   下载 12173 本文二维码信息
码上扫一扫!
分享到: 微信 更多
一种路径敏感的静态缺陷检测方法
肖庆1, 宫云战1, 杨朝红1,2, 金大海1, 王雅文1
1.北京邮电大学 网络与交换技术国家重点实验室,北京 100876;2.装甲兵工程学院 信息工程系,北京 100072
摘要:
提出一种多项式复杂度的路径敏感静态缺陷检测算法.该方法采用变量的抽象取值范围来表示属性状态条件,通过属性状态条件中的变量抽象取值范围为空来判断不可达路径.在控制流图(control flow graph,简称CFG)中的汇合节点上合并相同属性状态的状态条件,从而避免完整路径上下文分析的组合爆炸问题.该算法已应用于缺陷检测系统DTS(defect testing system).实际测试结果表明,该方法能够减少误报.
关键词:  缺陷检测  静态分析  路径敏感  数据流分析  程序分析
DOI:
分类号:
基金项目:Supported by the National High-Tech Research and Development Plan of China under Grant Nos.2007AA010302, 2009AA012404 (国家高技术研究发展计划(863))
Path Sensitive Static Defect Detecting Method
XIAO Qing,GONG Yun-Zhan,YANG Zhao-Hong,JIN Da-Hai,WANG Ya-Wen
Abstract:
This paper presents a new path sensitive algorithm for static defect detecting running in polynomial time. In this method, property state conditions are represented by abstract domain of variables, and infeasible paths can be identified when some variables’ abstract value range is empty. This method avoids the combination explosion of full path analysis by merging the conditions of identical property state at join points in the CFG (control flow graph). This algorithm has been implemented as part of a defect testing tool called DTS (defect testing system). Practical test results show that this method can reduce false positive.
Key words:  defect detecting  static analysis  path sensitive  dataflow analysis  program analysis