基于有限状态机的指针解引用静态检测方法  

Static Pointer Dereference Checking Method Based on Finite-state Machine

作　　者：詹瑾瑜[1,2] 陈忠湘[2] 郝宗波[1,2] 

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都611731 [2]电子科技大学信息与软件工程学院,四川成都611731

出　　处：《四川大学学报（工程科学版）》2011年第4期135-142,共8页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家核高基重大专项资助项目(2009ZX01039-003-001-002);国家自然科学基金面上资助项目(60973016);电子科技大学中央高校基本科研业务费专项资金资助项目(ZYGX2009J062)

摘　　要：为了产生高质量和高可靠性代码,提出一种指针解引用静态检测方法,该方法给出了指针状态转换的有限状态机定义。通过对源代码进行语义分析,得到指针指向信息,建立指针与内存单元之间的映射关系,并根据有限状态机中的指针状态判断指针解引用是否合法。本方法不仅记录了变量的作用域和指针集,还分析了指针的确定指向和可能指向,并对部分控制块采取延迟写入指向的方法,提高了指针解引用分析的精度,同时还可以检测内存释放异常的问题。实验结果表明该方法能有效检测非法指针解引用和内存释放异常。In order to produce a code with high quality and high reliability,a static pointer dereference checking method was presented,and the definition of the finite-state machine for pointer-state transition was given.The point-to information was gotten and the mapping relationship between pointer and memory unit was built through semantic analysis of source codes to judge whether it was legal to use the pointer according to the pointer-state in the finite-state machine.This method not only recorded the scope and pointer sets of the variable,but also analyzed point-to including the definite and the possible.And the method of delayed writing point-to to partial control blocks was applied to increase the efficiency of pointer dereference analysis and to detect the problem of the bad deallocation.Results of experimentation showed that this method can detect invalid pointer dereference and bad deallocation effectively.

关 键 词：有限状态机 指针解引用 指针状态 延迟写入 内存释放异常 

分 类 号：TP302.8[自动化与计算机技术—计算机系统结构]