9 results about "Pointer analysis" patented technology

The invention relates to a pointer analysis-based incremental data flow path extraction method. The method comprises the following steps of: firstly, acquiring an initial pointer variable related to an incremental code as a task variable set; then, performing reverse query on the task variables based on the pointing relation constraint graph to obtain a basic variable set and a memory object pointed by the basic variable set; and after the working set is initialized, executing pointing relation propagation, propagating the memory object to a pointing set of the task variable, and classifying a new association pointer found in propagation into an indirect variable set. And executing explicit dependency query on the indirect variable set, adding a new dependency variable into the task set, repeating the process until the constraint graph is stable, and finally obtaining pointing information of all variables. And an inter-process data dependence sub-graph is constructed, and an incremental data flow path is extracted. According to the method, through a locality principle and a reverse query strategy, an analysis range is limited to incremental code related variables, and the overhead and memory problems of global analysis are avoided.

The invention discloses a demand-driven reusable binary pointer analysis method, which is used for determining a pointing set and an alias of a given target pointer variable, and comprises the following steps of: S1, recovering a pointer type in a process through a use mode of the variable, and extracting an instruction related to pointer calculation; s2, on the basis of the pointer representation and an execution result of the modeling instruction, abstract interpretation is carried out in the process, a pointer representation set of all pointer variables is obtained, and the result is stored in an intermediate result library; s3, on the basis of an analysis result in the process, determining a to-be-analyzed function as required, and obtaining different pointer representations of the target pointer variable in different functions; and if a certain function is not analyzed, the in-process analysis of the step S1 and the step S2 is triggered for the function. According to the method, a context sensitive strategy and a flow sensitive strategy are realized, the balance of analysis efficiency and precision is realized, and inter-process on-demand pointer analysis can be efficiently carried out.

According to the context sensitive pointer analysis method provided by the invention, dependency and access relationships among modules are analyzed through keywords in the modules, modeling is carried out according to the dependency and access relationships, and a method calling statement for calling an interface is analyzed, so that the problem of completeness loss caused by the fact that interface access among the modules cannot be captured in a traditional pointer analysis method is solved. Secondly, an algorithm is designed, so that construction and updating of an object distribution graph and a module depth graph are completed in the statement analysis process, the pointer analysis efficiency is effectively improved, finally, key information is selected based on module depth information stored in the module depth graph to construct a context, the number of elements in the context is limited to be 1, and the algorithm is more efficient. Unnecessary analysis context elements are removed, and high precision of an analysis result is kept, so that the efficiency of an analysis process is remarkably improved.

The embodiment of the application discloses a function call information determination method and related device, wherein the method comprises the following steps: obtaining a source file; performing multi-layer type analysis (MLTA) on the source file to obtain a function call relationship; performing string pointer analysis on the source file to obtain a string transmission relationship; and combining the function call relationship and the string transmission relationship to obtain function call information. The method compensates for the defect that the MLTA can only identify the function type but cannot identify the string, and can improve the precision of the function call information on the premise of maintaining low time and memory overhead, because the code is limited to string pointer analysis and does not need to analyze the variable transmission condition of the entire program.

This application discloses a static program analysis method for the Spring Boot framework, including constructing an annotation model and a configuration property model; the annotation model is configured to parse annotations; the configuration property model is configured to provide a unified hierarchical key-value representation structure for configuration files of different formats; establishing a mapping set between annotations and configuration files and pointer analysis side effect handling logic; generating an intermediate representation in the form of a corresponding three-address code based on the target program to be analyzed; performing pointer analysis based on framework characteristics on the intermediate representation, and triggering the corresponding side effect handling logic according to the mapping set, completing missing pointer edges on the pointer flow graph, and completing implicit call relationships on the method call graph; obtaining a complete pointer flow graph and method call graph; and performing static program analysis based on the complete pointer flow graph and method call graph. This solves the problem of missing core components in static analysis due to auto-configuration in Spring Boot applications.

The application discloses a function pointer pointing analysis method, device and system based on continuation transmission, which comprises the following steps: selecting a point of interest function pointer, and initializing a related continuation transmission list and a pointing set; starting from a statement where the point of interest function pointer is located, performing intraprocedural analysis on a program in the direction opposite to a control flow, saving intraprocedural analysis results by using a function abstract, and updating the continuation transmission list and the pointing set according to the function abstract; if interprocedural action information is encountered, performing intraprocedural analysis on a function affected based on an influence generated by the interprocedural action information, returning to a direct predecessor of a statement where the interprocedural action information appears after the analysis is finished, and continuing to perform intraprocedural analysis; and when it is judged that the continuation transmission is in a termination state based on the continuation transmission list, outputting a corresponding pointing set. The application saves interprocedural action information of a program by using the characteristics of continuation transmission, takes out the information to return to intraprocedural calculation to obtain a result when needed, and improves the accuracy of pointer analysis.

The invention discloses a code behavior analysis method for a steel rolling process control system. The code behavior analysis method comprises the following steps: determining an instruction set architecture used by a program in the steel rolling process control system; performing instruction identification and binary processing, dividing a program into basic blocks, and establishing a mapping relation from the basic blocks to functions; analyzing parameter information transmitted to the sub-function by the parent function, and analyzing parameter and variable information of the sub-function through a stack top and stack bottom pointer to obtain a data transmission path in a function calling process; taking the input function as a start point of taint analysis, taking the output function as an end point of taint analysis, performing bidirectional taint analysis on the program, and constructing a program execution chain; performing code semantic analysis on the program, analyzing the typical field of the message, and constructing a weak supervised learning mode combining unsupervised learning and supervised learning to obtain a field identification and classification result. According to the method, program behaviors can be comprehensively mastered, and solid technical support is provided for system debugging, function verification, safety evaluation and potential vulnerability detection.

The present disclosure provides a method and device for analyzing function call relationship under micro-service architecture, and relates to the technical field of computer, in particular to the field of static program analysis. The specific implementation scheme is as follows: a plurality of functions are obtained as static pointer analysis starting points; static program analysis is performed on a target code library according to the static pointer analysis starting points, and a function call graph is generated according to an analysis result, the function call graph including a plurality of call edges determined based on the static pointer analysis starting points, the call edges being used to represent function call relationship of function calls performed by the static pointer analysis starting points as caller nodes; a plurality of call edges included in the function call graph are traversed to obtain target call edges stored in a graph database.

The application discloses a hybrid flow graph generation method supporting serialization or deserialization features, specifies an entry function for a java source program, adopts a context-sensitive pointer analysis method to construct an initial call graph, improves the efficiency and accuracy of pointer analysis, and combines the rules of information flow propagation to adapt to the deserialization blacklist and whitelist rules existing in the actual program, so that the constructed call relationship is more accurate, and the combination of information flow propagation and the call graph jointly constructs a hybrid flow graph, realizes accurate analysis of serialization or deserialization call relationship, and helps developers to find possible vulnerabilities.