【作者】 刘莉； 金大海； 宫云战；

【Author】 LIU Li,JIN Dahai,GONG Yunzhan (State Key Laboratory of Networking and Switching Technology,Beijing University of Posts and Telecommunications,Beijing 100876,China)

【机构】 北京邮电大学网络与交换技术国家重点实验室；

【摘要】 循环语句大量应用于程序开发中,但是在静态分析领域,对循环语句的处理还很不完善,存在着不终止和迭代不收敛等一系列问题。传统的循环处理策略所涉及的程序语义信息有限,无法应用于静态分析缺陷检测中。本文提出一种基于符号运算和抽象解释理论中Widening/Narrowing算子的循环处理方法,并将其应用于区间运算之中,以提高检测精度。本文所述方法己在缺陷检测系统(DTSGCC)中实现,对大量Linux中GCC开源工程的测试结果表明,本文提出的方法可以提高区间运算中循环处理的精度,减少潜在的误报。更多还原

【Abstract】 Looping statements are widely used in program development,but in static analysis field,looping processing is imperfect.There exist a series of problems like not terminate,iteration not converge and so on.Since the traditional loop processing strategies involves limited program semantic information,they can not be used in static defect detecting.In this paper,a loop processing method, which is based on symbolic execution and the Widening/ Narrowing operators in the abstract interpretation theory, has been proposed.We have implemented our technique in DTSGCC(Defect Testing System for GCC),a software defect detecting tool for GCC.According to the test result of a large number of open source projects under Linux,the method proposed in this paper can improve the accuracy of loop process in the interval computation,and reduce potential false positives.更多还原