Bug Finder Evaluation Guided Program Analysis Improvement
Liyuan Jia, Wei Yu Dong, Bailin Lu · 2019
There are many static analysis tools implemented with diverse principles for finding program bugs. The theoretical principles they based are usually pattern matching, abstract interpretation, model checking and symbolic execution. To evaluate the bug detection capability of different tools, we selected five static analysis tools for C/C++ programs implemented with diverse theoretical principles and evaluated them in detail. We have found that one single tool cannot achieve great results for bug detection. Guided by the evaluation results, we propose a code property graph based graph traversal method to handle those defect types which are not well-supported by static analysis tools. Experimental results show that the code property graph based graph traversal method can detect many defects which are difficult for existing static analysis tools.