C程序非法计算缺陷的静态检测  

Illegal computing defect detection by static analysis for C program

作　　者：董玉坤[1] DONG Yukun(College of Computer and Communication Engineering, China University of Petroleum, Qingdao, Shandong 266580, China)

机构地区：[1]中国石油大学(华东)计算机与通信工程学院,山东青岛266580

出　　处：《计算机工程与应用》2016年第19期31-36,共6页Computer Engineering and Applications

基　　金：山东省自然科学基金(No.BS2015DX017);中央高校基本科研业务费专项资金(No.15CX02050A);中国博士后科学基金(No.2015M581032)

摘　　要：为实现基于静态分析技术自动的检测C程序中的非法计算缺陷,提出了一种基于区域内存模型进行非法计算缺陷检测的方法。对C程序中的非法计算缺陷操作归纳总结出其受限集,以对相应运算进行约束;通过抽象的区域内存模型表示实际的内存存储,实现了基于抽象内存区域内存模型的数据流分析;基于数据流分析的结果,判定C程序中的受限操作是否违背受限集的约束,以实现非法计算缺陷的检测。5个实际工程的检测结果分析表明,该方法可有效地检测出C程序的各类非法计算缺陷。In order to automatically detect illegal computing defects for C procedures based on static analysis, this paperintroduces a method based on region-based memory model. Firstly, a restricted set is proposed, which can describe theconstraint of illegal computing operation. Then, an abstract region-based memory model is introduced to describe actualmemory, and dataflow analysis is implemented based on this model. Furthermore, this paper introduces an illegal computingdefect detection method based on the result of dataflow analysis, which determines the illegal computing operation byjudging restricted operations whether or not violate constraints. Experimental results of five real projects show that thismethod can detect various illegal computing defects.

关 键 词：缺陷检测 非法计算 静态分析 抽象内存模型 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]