22 results about "Pointer analysis" patented technology

The invention discloses a cross-language application program vulnerability mining method based on static analysis, which adopts a nested cross-programming language pointer analysis method and a micro-service cross-programming language taint tracking method to effectively solve the limitation of processing nested cross-language control flow and micro-service cross-language data flow. A nested language semantic boundary is accurately positioned by constructing a nested byte code, and a data stream is completely tracked by utilizing an interface relay technology, so that the detection precision is improved. According to the method, part of multi-end data streams and complex control streams of cross-programming language applications can be uniformly processed, and the analysis process in a cross-programming language environment is simplified; by nesting cross-programming language control flow diagram construction and double-end / multi-end data flow diagram construction, a unified analysis framework is constructed, seamless cooperation of static analysis among different languages is achieved, the analysis cost is reduced, the analysis efficiency is improved, efficient and accurate vulnerability mining is achieved in a complex cross-programming language application program, and the method is suitable for application and popularization. And the reliability of cross-language vulnerability detection is improved.

The invention belongs to the technical field of applet privacy leakage detection methods, and discloses an applet privacy leakage detection method and system based on an abstract syntax tree. Decompiling the packaged file of the applet to obtain a source code file; all the logic layer JavaScript files are converted into AST by using an expression analysis library; obtaining a calling dependency graph between a page logic layer file and a tool file layer according to the file reference relationship, obtaining a field-level binding dependency graph of the page logic layer file and the tool file layer according to a data and event binding relationship of the page rendering layer and the page logic layer, and merging the two layers to obtain a global dependency graph; finally, combining the dependency graphs to generate a global dependency relationship graph; dividing the JavaSript code into a plurality of basic blocks according to the dividing rule of the boundary of the control flow, determining the type of the edge according to the information of the boundary, and obtaining a GCFG by combining the dependency graph; and inputting the GCFG into a taint-pointer analysis module, and obtaining a privacy disclosure path according to predefined sink and source libraries and a data flow propagation rule.

The invention discloses a Java null pointer de-reference detection method based on static analysis, which realizes more accurate null pointer anomaly detection through combination of a hierarchical analysis framework and reachability verification. A to-be-detected target program is processed, and an intermediate representation IR and an intra-process control flow graph CFG are obtained; null value data flow analysis and alias analysis in the process are carried out based on the IR and the CFG, and a corresponding data flow result is generated; executing flow insensitive pointer analysis according to a data flow result, dynamically constructing a pointer flow graph of a Java program, spreading null values on the graph, and synchronously generating an interprocess control flow graph; potential null variables are extracted from the PFG, dereferencing statements related to the variables are collected, and a statement sequence which conforms to null value propagation of a control flow is searched on an ICFG graph in combination with a CFL-Reach algorithm; and for different code modes, for different types of statement sequences, performing reachability verification by adopting a rule-driven solver, and outputting a defect detection report.

The invention relates to a pointer analysis-based incremental data flow path extraction method. The method comprises the following steps of: firstly, acquiring an initial pointer variable related to an incremental code as a task variable set; then, performing reverse query on the task variables based on the pointing relation constraint graph to obtain a basic variable set and a memory object pointed by the basic variable set; and after the working set is initialized, executing pointing relation propagation, propagating the memory object to a pointing set of the task variable, and classifying a new association pointer found in propagation into an indirect variable set. And executing explicit dependency query on the indirect variable set, adding a new dependency variable into the task set, repeating the process until the constraint graph is stable, and finally obtaining pointing information of all variables. And an inter-process data dependence sub-graph is constructed, and an incremental data flow path is extracted. According to the method, through a locality principle and a reverse query strategy, an analysis range is limited to incremental code related variables, and the overhead and memory problems of global analysis are avoided.

The invention discloses a Java cryptography API misuse detection method based on taint analysis, which comprises the following steps: S1, setting a taint analysis rule according to the type of cryptography API misuse; s2, processing a to-be-detected target program to obtain a result IR for static analysis; s3, performing pointer analysis on the IR generated in the step S2 in combination with a target program code, and generating a pointing flow graph and a method calling graph of the to-be-detected target program; and S4, on the basis of the pointing flow graph and the method calling graph obtained in the step S3, performing taint analysis driven by pointer analysis on the IR generated in the step S2, analyzing a program path through which a taint flow passes, and detecting whether misuse occurs according to different types of cryptographic API misuse rules. Compared with a traditional Java cryptography API misuse detection method, the Java cryptography API misuse detection method introduces taint analysis to establish the taint flow of the API related parameters from the creation point to the use point, so that Java cryptography API misuse is detected, and the Java cryptography API misuse detection method has the advantages of being complete in detection capacity and high in detection precision.

The invention discloses a demand-driven reusable binary pointer analysis method, which is used for determining a pointing set and an alias of a given target pointer variable, and comprises the following steps of: S1, recovering a pointer type in a process through a use mode of the variable, and extracting an instruction related to pointer calculation; s2, on the basis of the pointer representation and an execution result of the modeling instruction, abstract interpretation is carried out in the process, a pointer representation set of all pointer variables is obtained, and the result is stored in an intermediate result library; s3, on the basis of an analysis result in the process, determining a to-be-analyzed function as required, and obtaining different pointer representations of the target pointer variable in different functions; and if a certain function is not analyzed, the in-process analysis of the step S1 and the step S2 is triggered for the function. According to the method, a context sensitive strategy and a flow sensitive strategy are realized, the balance of analysis efficiency and precision is realized, and inter-process on-demand pointer analysis can be efficiently carried out.

According to the context sensitive pointer analysis method provided by the invention, dependency and access relationships among modules are analyzed through keywords in the modules, modeling is carried out according to the dependency and access relationships, and a method calling statement for calling an interface is analyzed, so that the problem of completeness loss caused by the fact that interface access among the modules cannot be captured in a traditional pointer analysis method is solved. Secondly, an algorithm is designed, so that construction and updating of an object distribution graph and a module depth graph are completed in the statement analysis process, the pointer analysis efficiency is effectively improved, finally, key information is selected based on module depth information stored in the module depth graph to construct a context, the number of elements in the context is limited to be 1, and the algorithm is more efficient. Unnecessary analysis context elements are removed, and high precision of an analysis result is kept, so that the efficiency of an analysis process is remarkably improved.

The invention discloses a method for analyzing a pointer of a swan Mongolia ArkTS cache component based on static analysis, which comprises the following steps of: screening AppStorage-related APIs (Application Program Interface) through three-address code semantic modeling, constructing a bidirectional synchronous strong connected component by adopting a reverse backflow edge, and blocking unidirectional synchronous reverse propagation based on freezing constraint, so as to achieve the purpose of analyzing the pointer of the swan Mongolia ArkTS cache component. And realizing cross-component data stream accurate tracking by combining a dynamic pointer assignment graph and an accessibility algorithm. According to the method, the false alarm rate of pointer analysis is reduced from 20% to 5%, the accuracy rate of memory leak detection reaches 98%, the analysis efficiency is improved by 40%-60%, the method is compatible with an OpenHarmony tool chain, and the problems of memory security and optimization under an ArkTS response type synchronization mechanism are solved.

The invention discloses a static pointer analysis-combined detection acceleration method and medium during memory safe operation, and the method comprises the steps: carrying out the preprocessing and analysis of a source code of a to-be-detected program through a compiler, collecting the metadata of an array variable, carrying out the intra-process alias analysis and the inter-process alias analysis, and obtaining a to-be-detected program; inserting code snippets used for transmitting metadata in a cross-process manner, rewriting array subscript expressions in codes, inserting code snippets used for border crossing detection, inserting runtime detection codes, compiling and linking instrumented source codes by using a compiler and a linker, and generating an executable file; and running the executable file, and outputting a detection result during safe running of the memory. According to the method, lightweight Boolean expression calculation is used for replacing heavy-weight runtime detection, the time overhead of a runtime detection tool can be effectively reduced on the premise that existing codes are not changed, missing report and false report are not introduced, and the time sequence of report errors and memory errors is guaranteed, and the method has practical application value.

The embodiment of the application discloses a function call information determination method and related device, wherein the method comprises the following steps: obtaining a source file; performing multi-layer type analysis (MLTA) on the source file to obtain a function call relationship; performing string pointer analysis on the source file to obtain a string transmission relationship; and combining the function call relationship and the string transmission relationship to obtain function call information. The method compensates for the defect that the MLTA can only identify the function type but cannot identify the string, and can improve the precision of the function call information on the premise of maintaining low time and memory overhead, because the code is limited to string pointer analysis and does not need to analyze the variable transmission condition of the entire program.

This application discloses a static program analysis method for the Spring Boot framework, including constructing an annotation model and a configuration property model; the annotation model is configured to parse annotations; the configuration property model is configured to provide a unified hierarchical key-value representation structure for configuration files of different formats; establishing a mapping set between annotations and configuration files and pointer analysis side effect handling logic; generating an intermediate representation in the form of a corresponding three-address code based on the target program to be analyzed; performing pointer analysis based on framework characteristics on the intermediate representation, and triggering the corresponding side effect handling logic according to the mapping set, completing missing pointer edges on the pointer flow graph, and completing implicit call relationships on the method call graph; obtaining a complete pointer flow graph and method call graph; and performing static program analysis based on the complete pointer flow graph and method call graph. This solves the problem of missing core components in static analysis due to auto-configuration in Spring Boot applications.

The application relates to a type-sensitive pointer analysis method and device for generic programming, and particularly relates to the technical field of software testing. The method comprises the following steps: obtaining target program code to be analyzed; mapping a type variable in a generic programming statement in the target program code to an actual type of the type variable, and putting the mapping between the type variable and the actual type into a context of the generic programming statement; and performing context-sensitive pointer analysis on the target program code based on the context of the generic programming statement, so as to obtain a pointing relationship between various pointers in the target program code. The mapping relationship between a specific type of generic instantiation and a type variable is put into a context for context-sensitive pointer analysis, so that the pointing relationship between various pointers is obtained, and the accuracy of the context-sensitive pointer analysis for the generic programming is improved.

Methods and devices for analyzing and updating intermediate representations containing pointers includes compiling one or more source files into intermediate representations (IRs) having pointers, analyzing the IRs, producing transformed IRs comprising updated pointers, and producing object code from the transformed IRs. The device may include one or more non-transitory computer-readable storage devices having computer-executable instructions, when executed, cause a processing structure to perform the actions described relating to pointers. The analysis and updating of pointers may relate to types of bounds to enhance security of the systems in question by preventing erroneous references to memory space by pointers.

This application relates to an object-sensitive pointer analysis method and apparatus for generic programming, and specifically relates to the field of computer vision technology. The method includes: obtaining target program code to be analyzed; in generic programming statements in the target program code, mapping type variables to instantiation positions, and putting the mapping between the type variables and the instantiation positions into the context of the generic programming statements; based on the context of the generic programming statements, performing context-sensitive pointer analysis on the target program code to obtain the pointing relationships between various pointers in the target program code. The above solution puts the mapping relationship between the generic instantiation position and the type variable into the context for context-sensitive pointer analysis to obtain the pointing relationships between various pointers, improving the accuracy of context-sensitive pointer analysis for generic programming.

The application discloses a memory safety runtime detection acceleration method combined with static pointer analysis and a medium, and the method comprises the following steps: preprocessing and analyzing the source code of a program to be detected by using a compiler, collecting metadata of array variables, performing intra-procedure alias analysis and inter-procedure alias analysis, inserting a code segment for transferring metadata across procedures, rewriting array subscript expressions in the code, inserting a code segment for out-of-bound detection, inserting runtime detection code, compiling and linking the source code after the plugging by using the compiler and the linker, and generating an executable file; and running the executable file and outputting the result of the memory safety runtime detection. The application uses lightweight Boolean expression calculation instead of heavy runtime detection, can effectively reduce the time overhead of the runtime detection tool without changing the existing code, introducing false negatives and false positives, and guaranteeing the timing of error reporting and memory errors, and has practical application value.

The invention discloses an automatic parallelization method and system for enhancing dependency analysis, and belongs to the technical field of computer software, and the method comprises the following steps: tracking the dynamic change of a pointer under different program structures and operation statements according to a program execution sequence, and accurately mastering the pointing direction and the value range of the pointer; when the pointer variable is identified, starting to check variable information in the program from the declaration and the definition source of the variable, and comprehensively judging the alias relationship between the pointer and other variables or the pointer according to the assignment condition and the function calling scene, so as to accurately identify the data dependency relationship in the program; according to results obtained by stream sensitive pointer analysis and alias analysis, performing classification marking on data dependence in the internal representation of the program; and the compiler implements parallelization processing on the part without data dependence or capable of parallel dependence according to the mark. According to the method, misjudgment easily occurring in a traditional method can be effectively reduced, and the accuracy and effectiveness of parallelization decision making are enhanced.

The invention discloses a static program analysis method for inter-language interaction behaviors in a multi-language program, which comprises the following steps of: constructing a uniform expression model of analysis results of a Java pointer analysis framework and a C pointer analysis framework, and simultaneously modeling inter-language interaction interfaces defined in various Java local interface specifications; the analysis result of the Java pointer analysis framework and the C pointer analysis framework at the inter-language interaction point can be represented by the representation model and perceived by the pointer analysis framework of the other party, so that the pointer analysis framework of the other party can analyze specific inter-language interaction behaviors according to modeling of the inter-language interaction interface. In addition, the method can be used for being combined with a current most advanced pointer analysis framework, and the accuracy and efficiency of inter-language interaction behavior analysis are improved. Through the method, a more complete analysis result is expected to be provided for applications such as program security analysis and defect detection.

The application discloses a function pointer pointing analysis method, device and system based on continuation transmission, which comprises the following steps: selecting a point of interest function pointer, and initializing a related continuation transmission list and a pointing set; starting from a statement where the point of interest function pointer is located, performing intraprocedural analysis on a program in the direction opposite to a control flow, saving intraprocedural analysis results by using a function abstract, and updating the continuation transmission list and the pointing set according to the function abstract; if interprocedural action information is encountered, performing intraprocedural analysis on a function affected based on an influence generated by the interprocedural action information, returning to a direct predecessor of a statement where the interprocedural action information appears after the analysis is finished, and continuing to perform intraprocedural analysis; and when it is judged that the continuation transmission is in a termination state based on the continuation transmission list, outputting a corresponding pointing set. The application saves interprocedural action information of a program by using the characteristics of continuation transmission, takes out the information to return to intraprocedural calculation to obtain a result when needed, and improves the accuracy of pointer analysis.

The invention relates to the technical field of software testing, and provides a static deadlock detection method and device for java codes, electronic equipment and a computer program product. The method comprises the following steps: generating an intermediate representation code and a control flow diagram of a to-be-tested java code; performing thread context sensitive pointer analysis processing on the intermediate representation code according to a preset pointer analysis rule, constructing a call graph with a complete context according to a pointer analysis processing result, and labeling thread context information on each edge of the call graph; on the basis of the control flow diagram, identifying a lock acquisition sequence in an execution path of each thread according to the call diagram, and generating a lock acquisition sequence according to the lock acquisition sequence; and determining a deadlock detection result of the to-be-detected java code by analyzing the lock acquisition sequence. According to the method, through introduction of thread context-sensitive pointer analysis, whether a loop dependence phenomenon exists in lock acquisition operations among different threads can be accurately distinguished, so that the accuracy of deadlock detection is improved.

The invention discloses a code behavior analysis method for a steel rolling process control system. The code behavior analysis method comprises the following steps: determining an instruction set architecture used by a program in the steel rolling process control system; performing instruction identification and binary processing, dividing a program into basic blocks, and establishing a mapping relation from the basic blocks to functions; analyzing parameter information transmitted to the sub-function by the parent function, and analyzing parameter and variable information of the sub-function through a stack top and stack bottom pointer to obtain a data transmission path in a function calling process; taking the input function as a start point of taint analysis, taking the output function as an end point of taint analysis, performing bidirectional taint analysis on the program, and constructing a program execution chain; performing code semantic analysis on the program, analyzing the typical field of the message, and constructing a weak supervised learning mode combining unsupervised learning and supervised learning to obtain a field identification and classification result. According to the method, program behaviors can be comprehensively mastered, and solid technical support is provided for system debugging, function verification, safety evaluation and potential vulnerability detection.

The present disclosure provides a method and device for analyzing function call relationship under micro-service architecture, and relates to the technical field of computer, in particular to the field of static program analysis. The specific implementation scheme is as follows: a plurality of functions are obtained as static pointer analysis starting points; static program analysis is performed on a target code library according to the static pointer analysis starting points, and a function call graph is generated according to an analysis result, the function call graph including a plurality of call edges determined based on the static pointer analysis starting points, the call edges being used to represent function call relationship of function calls performed by the static pointer analysis starting points as caller nodes; a plurality of call edges included in the function call graph are traversed to obtain target call edges stored in a graph database.

The application discloses a hybrid flow graph generation method supporting serialization or deserialization features, specifies an entry function for a java source program, adopts a context-sensitive pointer analysis method to construct an initial call graph, improves the efficiency and accuracy of pointer analysis, and combines the rules of information flow propagation to adapt to the deserialization blacklist and whitelist rules existing in the actual program, so that the constructed call relationship is more accurate, and the combination of information flow propagation and the call graph jointly constructs a hybrid flow graph, realizes accurate analysis of serialization or deserialization call relationship, and helps developers to find possible vulnerabilities.