Source code scanning method, device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a source code scanning method, a device, electronic equipment and a storage medium. According to the embodiment of the invention, the method comprises the steps of obtaining a source code , wherein the source code comprises a target function; performing equivalent conversion processing on the target function to obtain at least one conversion function corresponding to the target function; performing substitution processing on a target function in the source code by adopting a conversion function to obtain a substitution code; constructing an abstract syntax tree based on the replacement code; and performing defect scanning on the abstract syntax tree based on a preset defect detection rule to obtain a scanning result of defects in the source code. In the embodiment of the invention, the unknown or difficult-to-process target function in the source code is replaced with the conversion function which is equivalent to the target function, known and convenient to scan, so that the defects related to the target function can be detected when the defects are scanned. The scheme can be applied to a cloud server to improve the defect detection efficiency, so that the source code scanning efficiency can be improved.

Description

technical field [0001] The invention relates to the field of computers, in particular to a source code scanning method, device, electronic equipment and storage medium. Background technique [0002] Static Code Analysis (Static Code Analysis) is one of the software application security solutions that have been mentioned more in recent years. It means that in software engineering, the source code is directly scanned by some scanning tools without being compiled by a compiler. Some defects, loopholes, etc., to help developers quickly find, locate, repair and manage security risks in source code. [0003] However, the current static source code scanning methods often have problems such as false negatives, and therefore, the current source code scanning methods are inefficient. Contents of the invention [0004] Embodiments of the present invention provide a source code scanning method, device, electronic equipment, and storage medium, which can improve the efficiency of sour...

Images