Solidity smart contract-based syntactic information extraction method, device and storage medium

Abstract

The invention provides a Solidity smart contract-based syntactic information extraction method, a device and a storage medium. The method comprises the steps of: calling a first index algorithm to construct a first service class corresponding to a current syntax node, and meanwhile saving the index relation of syntactic information of the current syntax node; calling a syntactic filling algorithmto fill syntactic information of the current first service class; calling a next layer syntax node service class to fill the syntactic information corresponding to the next layer service class until all the service classes are filled; and sorting the inheritance sequence of contracts to obtain the inheritance line information of each contract so as to accurately realize tracing of each expressiontype in the contracts. According to the method, a tree-shaped data structure composed of the syntax node service classes is established in a recursion mode, so that each syntax node can fully acquirethe syntactic information of the syntax node, and the problem that syntactic information extraction of a syntactic information extraction method achieved based on syntax tree traversal is incomplete and inaccurate is solved.

Description

technical field [0001] This application relates to the technical field of blockchain, and in particular to a method, device and storage medium for extracting grammatical information based on Solidity smart contracts. Background technique [0002] As a set of commitments defined in digital form, smart contracts control digital assets and include the rights and obligations agreed by contract participants, which are automatically executed by computer systems. The combination of smart contracts and blockchain technology is an emerging product, and it is technically immature. There are various business processes or technical loopholes from application business to compiler to virtual machine to the bottom layer of blockchain. Many smart contract projects launched Frequently disclosed security issues. Because smart contracts are difficult to tamper with once they are deployed to the blockchain, how to fully ensure the security of smart contracts before deployment becomes a key ste...

AI Technical Summary

Problems solved by technology

Most security solutions for verifying smart contracts require grammatical analysis and auditing of the contract code, and often the completeness, accuracy and timeliness of grammatical information acquisition cannot be guaranteed

Existing solutions based on grammatical analysis can only judge whether there are risky grammatical elements in the system from the code level. Such a method cannot judge the actual execution logic and action results of the code, and there are the following problems: 1. .Developers need to judge whether a certain piece of code is risky based on actual experience and problems that have occurred during program operation, and only traverse the problematic part of the syntax tree according to the established rules, without fully applying the syntax information in the code; 2. Static inspection only matches and checks the syntax of the code, and cannot accurately perceive the context information in the program. The obtained syntax information is inaccurate and prone to false positives; for example, an int variable age is used to represent the user's age. Years later, the user's age + 1, the static test will only detect that there is an overflow risk in the addition operation, but in fact the user's age will not exceed 1000 years old at most, the method of traversing the syntax tree can only find that addition is used here, but not addition The operand is int type; 3. There is no correlation between the information between each syntax node, and the dynamic operation of the program is not considered. When traversing a syntax node, the syntax information declared by other syntax nodes cannot be considered.

Images