Fully Detection of Illegal Value Use Defects
Yukun Dong, Yalan Wang · 2016
There are many illegal value use defects in C programs, for example, illegal computing, use of uninitialized variables and array out of bounds. When C programs are running, these defects may cause software failure, and may lead to serious consequences. For fully detecting these illegal value use defects, we apply abstract regions simulate memory blocks that allocated to memory objects at the runtime, and use a symbolic expression to express the value of a region, we call the model RSTVL. Based on the result of dataflow analysis, RSTVL can describe memory states of each program point, and the value of each memory object at each program point can be calculated. Based on the region-based model, the determining criterion of illegal value defects is introduced for detecting these defects. The method has been implemented in the defect detection tool DTSC, and 5 open source projects are tested, the test results show the efficiency of our method.