欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
为了实现对C程序中空指针引用的充分检测，本文提出了一种基于区域内存模型的空指针引用缺陷检测方法。首先，提出了基于区域的符号化三值逻辑（Region-based Symbolic Three-Valued Logic ，RSTVL ），RSTVL能够描述C程序运行时内存中数据结构的形态信息与变量的存储状态，以及可寻址表达式间的各种关系；其次，给出了基于抽象语法树与函数识别被引用指针方法；最后，结合基于RSTVL的数据流分析结果，将对被引用指针的检测转换为对相应区域的检测，给出了空指针引用缺陷检测的方法，通过函数实现过程间的空指针引用缺陷检测。对比实验结果表明，本文方法在保证一定检测准确率的前提下，能够极大的减少空指针引用缺陷的漏报。
英文摘要：
In order to fully detect null pointer dereference for C procedures ,this paper introduces a method based on region-based memory model .Firstly ,region-based symbolic three-valued logic （RSTVL ） is proposed ,which can describe shape of data structures ,all kinds of memory states and relations of addressable expressions .Then ,an approach to fully recognizing pointer deref-erences based on abstract syntax tree and procedure summary is introduced .Furthermore ,this paper introduces a null pointer derefer-ence detection method ,which translates pointer dereference detection into region detection applying the result of data flow analysis based on RSTVL ,and detects interprocedural null pointer dereference based on procedure summary .Experiment results show that compared with DTSC-STVL and Klocwork9 ,the proposed method could dramatically reduce null pointer dereference false negative on the precondition of guarantee the detection precision .
同期刊论文项目
同项目期刊论文
期刊信息
位置：