CoBOT: Static C/C++ bug detection in the presence of incomplete code

Gao, Q; Ma, S; Shao, S; Sui, Y; Zhao, G; Ma, L; Ma, X; Duan, F; Deng, X; Zhang, S; Chen, X

CoBOT: Static C/C++ bug detection in the presence of incomplete code

Gao, Q Ma, S Shao, S Sui, Y

Zhao, G Ma, L Ma, X Duan, F Deng, X Zhang, S Chen, X

Permalink

Publication Type:: Conference Proceeding
Citation:: Proceedings - International Conference on Software Engineering, 2018, pp. 385 - 388
Issue Date:: 2018-05-28

Closed Access

	Filename	Description	Size
	icpc18.pdf	Published version	704.18 kB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Gao, Q	en_US
dc.contributor.author	Ma, S	en_US
dc.contributor.author	Shao, S	en_US
dc.contributor.author	Sui, Y https://orcid.org/0000-0002-9510-6574	en_US
dc.contributor.author	Zhao, G	en_US
dc.contributor.author	Ma, L	en_US
dc.contributor.author	Ma, X	en_US
dc.contributor.author	Duan, F	en_US
dc.contributor.author	Deng, X	en_US
dc.contributor.author	Zhang, S	en_US
dc.contributor.author	Chen, X	en_US
dc.date.issued	2018-05-28	en_US
dc.identifier.citation	Proceedings - International Conference on Software Engineering, 2018, pp. 385 - 388	en_US
dc.identifier.isbn	9781450357142	en_US
dc.identifier.issn	0270-5257	en_US
dc.identifier.uri	http://hdl.handle.net/10453/131233
dc.description.abstract	© 2018 Authors. To obtain precise and sound results, most of existing static analyzers require whole program analysis with complete source code. However, in reality, the source code of an application always interacts with many third-party libraries, which are often not easily accessible to static analyzers. Worse still, more than 30% of legacy projects [1] cannot be compiled easily due to complicated configuration environments (e.g., third-party libraries, compiler options and macros), making ideal "whole-program analysis" unavailable in practice. This paper presents CoBOT [2], a static analysis tool that can detect bugs in the presence of incomplete code. It analyzes function APIs unavailable in application code by either using function summarization or automatically downloading and analyzing the corresponding library code as inferred from the application code and its configuration files. The experiments show that CoBOT is not only easy to use, but also effective in detecting bugs in real-world programs with incomplete code. Our demonstration video is at: https://youtu.be/bhjJp3e7LPM.	en_US
dc.relation.ispartof	Proceedings - International Conference on Software Engineering	en_US
dc.relation.isbasedon	10.1145/3196321.3196367	en_US
dc.title	CoBOT: Static C/C++ bug detection in the presence of incomplete code	en_US
dc.type	Conference Proceeding
utslib.for	0803 Computer Software	en_US
pubs.embargo.period	Not known	en_US
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology/School of Computer Science
pubs.organisational-group	/University of Technology Sydney/Strength - CAI - Centre for Artificial Intelligence
utslib.copyright.status	closed_access
pubs.publication-status	Published	en_US

Abstract:

© 2018 Authors. To obtain precise and sound results, most of existing static analyzers require whole program analysis with complete source code. However, in reality, the source code of an application always interacts with many third-party libraries, which are often not easily accessible to static analyzers. Worse still, more than 30% of legacy projects [1] cannot be compiled easily due to complicated configuration environments (e.g., third-party libraries, compiler options and macros), making ideal "whole-program analysis" unavailable in practice. This paper presents CoBOT [2], a static analysis tool that can detect bugs in the presence of incomplete code. It analyzes function APIs unavailable in application code by either using function summarization or automatically downloading and analyzing the corresponding library code as inferred from the application code and its configuration files. The experiments show that CoBOT is not only easy to use, but also effective in detecting bugs in real-world programs with incomplete code. Our demonstration video is at: https://youtu.be/bhjJp3e7LPM.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/131233