A Fault Detection Method for Integer Overflow Based on Metamorphic Relations

Abstract

The invention discloses an integer overflow fault detection method based on a transformation relationship. First, a static test tool is used to perform static detection on a program under test, and an integer variable in which integer overflow may occur is preliminarily determined, and is marked as an integer overflow check. point; then, the integers referenced by the integer-definition statement and the integer-use statement are identified based on a "definition-use" model containing the list of integer-definition statements and the list of integer-use statements that cause the integer overflow fault. Overflow integer, if the overflow integer has the dangerous use of the integer expressed in the statement list, it will be identified as a dangerous integer; finally, before the statement of the source code of the tested program that refers to the dangerous integer is executed, the transformation test method is adopted. Detects whether an integer overflow fault occurs for the dangerous integer. Through the method of the present invention, an accurate and effective method is provided for the detection of integer overflow faults.

Description

technical field [0001] The invention relates to integer overflow fault detection in software, in particular to an integer overflow fault detection method based on metamorphic relations, which belongs to the field of software testing. Background technique [0002] Integer overflow faults are considered to be an important factor affecting the security of software systems. In order to detect the occurrence of such a failure, there are generally two methods. The first is static testing, also known as static review, through which some static review tools are used to review program source code or binary code according to set rules. The biggest advantage of this method is that it can be implemented automatically, avoiding manual participation, and improving the feasibility of the method. But its biggest disadvantage is the high rate of false alarms, that is, it will generate a large number of false failures. Because the defects or failures obtained through the static review tool...

AI Technical Summary

Problems solved by technology

However, there are difficulties in how to design effective test cases and how to judge whether the test case execution results are correct

These two problems greatly limit the application field of dynamic testing in integer overflow fault detection

Images