基于属性可靠分析的空指针引用缺陷检测  

Null pointer dereference defects detection based on property sound analysis

作　　者：董玉坤[1] DONG Yukun(College of Computer and Communication Engineering, China University of Petroleum, Qingdao, Shandong 266580, China)

机构地区：[1]中国石油大学(华东)计算机与通信工程学院,山东青岛266580

出　　处：《计算机工程与应用》2016年第22期9-14,104,共7页Computer Engineering and Applications

基　　金：山东省自然科学基金(No.BS2015DX017);中央高校基本科研业务费专项资金(No.15CX02050A)

摘　　要：为实现基于静态分析技术充分地检测出C程序中的空指针引用缺陷,提出了一种基于属性可靠分析的缺陷检测方法。首先介绍了空指针引用缺陷模式及特征。然后针对空指针引用缺陷的检测特点提出了属性可靠分析理论,并将指针的指向属性描述为一个属性格。通过提出的抽象内存模型,基于给出的每种程序语句上的迁移实现指针指向属性的可靠分析,根据得到的每个被引用指针的指向属性进而实现空指针引用缺陷的检测。通过对五个实际工程的检测结果分析表明,方法可充分检测出C程序的空指针引用缺陷。In order to fully detect null pointer dereference defects for C procedures based on static analysis, this paperintroduces a method based on property sound analysis. Firstly, defect pattern and feature of null pointer dereference areintroduced. Then, the property sound analysis theory is proposed to detect null pointer dereference defects, and the pointproperty of pointers is abstracted as attribute lattice. Through an abstract memory model and transfer function of eachkind of statement, point-to property of each pointer can be get soundly, and null pointer dereference defects detectioncan be realized based on the point-to property of each referenced pointer. Experiment results of five real projects showthat this method can fully detect null pointer dereference defects.

关 键 词：缺陷检测 缺陷模式 空指针引用 属性可靠分析 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]