Static code detection method and static code detection system and storage device

Abstract

The invention belongs to the technical field of programming, and relates to a static code detection method and a static code detection system and storage device. The static code detection method comprises the following steps of: processing static codes, extracting variable information and establishing a related variable set; classifying defects according to variables which may generate defects, establishing a defect set, wherein the defect set comprises at least one defect subset, wherein each defect subset comprises a root node defect related to a variable; confirming the defect according tothe false alarm condition of the defect of the root node in the defect subset. According to the invention, the defect correlation analysis technology is added on the basis of the prior static defect detection, and the defects with dependency relation are divided into a group based on the intrinsic correlation among defects; when a subset relation exists among the defects, if the root node in the defect subset is a false alarm, all defects in the whole subset are false alarm, thereby greatly improving the checking efficiency of the static code detection defect and reducing the workload of manual confirmation.

Description

technical field [0001] The invention belongs to the technical field of programming, and in particular relates to a static code detection method, a static code detection system and a storage device. Background technique [0002] Static code detection refers to checking the correctness of the program by analyzing or checking the syntax, structure, process, interface, etc. of the source program without running the program itself. Perform structural analysis, flowchart analysis, and symbolic execution on requirements specifications, software design specifications, and source programs to find errors. Static code detection finds deficiencies and suspicious points through the analysis of the static characteristics of the program, such as mismatched parameters, inappropriate loop nesting and branch nesting, unallowed recursion, unused variables, and references to null pointers and suspicious calculations etc. Static test results can be used for further troubleshooting and provide ...

AI Technical Summary

Problems solved by technology

The static code detection process includes: first modeling the defect, and then detecting the defect by scanning the source code. However, since the detection process does not need to run the program, the detected defects have the problem of false positives. The existing technology is to improve the accuracy From the point of view, such as interval calculation, function analysis, etc., the research on reducing the workload of manual confirmation has not yet been involved

Images