用代码分析技术检测软件缺陷  

Software bugs detection using code analysis technology

作　　者：赵国亮[1] 蒋勇[2] 孔令兵[3] 

机构地区：[1]中国航天科工集团第二研究院706所,北京100854 [2]中国空间技术研究院北京卫星信息工程研究所,北京100086 [3]北京航天时代光电科技有限公司,北京100094

出　　处：《计算机工程与设计》2011年第8期2741-2744,2808,共5页Computer Engineering and Design

摘　　要：为了查找和发现软件源代码中的漏洞和薄弱环节,进一步提高软件的质量,在深入研究代码分析技术原理的基础上,提出了代码分析技术的应用模式,从内存管理、数组越界、并发缺陷以及空指针引用或异常等多个角度进行了探讨分析,给出具体实例对代码分析技术在解决具体问题中的重要性进行论证。最后给出了代码分析技术用于检测软件缺陷的主要步骤。该研究对软件源代码的测试工作具有一定的理论价值和实际意义。To find the bugs and weak links of the software source code, and to further improve the quality of the software, the model of code analysis technology is proposed based on deeply studying the principle of code analysis technology. The analysis is from several angles such as memory management, array out of bounds, concurrency defect, null pointer references and exceptions. It showed specific examples to demonstrate the importance of code analysis techniques in solving problems. Finally, the major steps in software defects testing which used the code analysis technology are presented. It has some theoretical values and practical significance in the software source code testing work.

关 键 词：代码分析 漏洞检测 内存泄露 数组越界 缓冲区溢出 数据流 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]