|
Analysis of program changes nature and searching for unpatched code fragments
M. S. Arutunian, G. S. Ivanov, V. G. Vardanyan, H. K. Aslanyan, A. I. Avetisyan, Sh. F. Kurmangaleev Ivannikov Institute for System Programming of the Russian Academy of Sciences
Abstract:
Software developers often resort to borrowing code both within one project and from another. Due to the possible content of errors in the source code snippet, this can lead to error propagation across program. Libraries used without source code may also contain potential errors. The purpose of this work is developing methods for analyzing the nature of changes between versions of software components for which source code is missing. And for changes potentially related to the correction of defects, search for similar, but not fixed defects using the code clone search methods. The implementation of the proposed approach to the analysis of the components used in software development will ensure the assessment of the quality of the proposed software patches. Since the implemented method is independent of the architecture of the operating system, and also works with executable software code, this allows it to be used for analyzing third-party components and for analyzing binary builds of proprietary software. The average percentage of true positives on the CoreBench test suite is $\sim 73\%$.
Keywords:
code static analysis, code clones, binary code analysis, unpatched code fragments.
Citation:
M. S. Arutunian, G. S. Ivanov, V. G. Vardanyan, H. K. Aslanyan, A. I. Avetisyan, Sh. F. Kurmangaleev, “Analysis of program changes nature and searching for unpatched code fragments”, Proceedings of ISP RAS, 31:1 (2019), 49–58
Linking options:
https://www.mathnet.ru/eng/tisp397 https://www.mathnet.ru/eng/tisp/v31/i1/p49
|
Statistics & downloads: |
Abstract page: | 192 | Full-text PDF : | 57 | References: | 29 |
|