Static and Dynamic Techniques for Classifying, Locating, and Fixing Bugs

用于分类、定位和修复错误的静态和动态技术

基本信息

批准号：
0701957
负责人：
Susan Horwitz
金额：
$ 60万
依托单位：
University of Wisconsin-Madison
依托单位国家：
美国
项目类别：
Continuing Grant
财政年份：
2007
资助国家：
美国
起止时间：
2007-09-01 至 2011-08-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=0701957&HistoricalAwards=false
关键词：
Static Dynamic Techniques Classifying Locating

项目摘要

P0701957Static and Dynamic Techniques for Classifying, Locating, and Fixing Bugs Susan Horwitz and Ben LiblitTesting and debugging are vital but notoriously difficult parts of the software-development process. Languages like C and C++, with weak type systems, exacerbate the problem by making it easy for programmers to introduce memory- and type-safety bugs. These bugs are hard to identify because the actual error and the symptom often seem to have no logical connection.This research focuses on designing, implementing, and evaluating innovative new ways to identify, reproduce, and eliminate bugs. Questions addressed include: How to determine whether a program failure is due to a memory/type-safety bug, and in that case how to locate the buggy code (not just the code where the symptom occurs); given a failure that is not due to a memory/type-safety bug, how to reproduce that failure, and how to find the source of the problem.One of the most creative aspects of the work is the combination of complementary techniques to achieve powerful synergies: dynamic memory type inference is combined with static program slicing to attack memory/type-safety bugs, while program slicing is paired with statistical bug identification to implement new algorithms for finding, reproducing, and repairing other kinds of bugs.

P0701957用于分类，定位和修复虫子Susan Horwitz和Ben liblittesting和调试的错误和动态技术在软件开发过程中至关重要，但臭名昭著的部分。 C和C ++等语言具有弱类型系统，通过使程序员轻松引入内存和类型安全错误来加剧问题。这些错误很难识别，因为实际错误和症状似乎通常没有逻辑上的联系。这项研究重点是设计，实施和评估创新的新方法来识别，复制和消除错误。解决的问题包括：如何确定程序故障是否是由于内存/类型安全错误造成的，在这种情况下，如何找到错误的代码（不仅仅是发生症状的代码）；给定的失败不是由于内存/类型安全的错误，如何重现失败以及如何找到问题来源。工作的最具创造性方面之一是补充技术的组合来实现强大的协同作用：动态内存类型推断与静态程序相结合以攻击记忆/类型的漏洞，同时识别静态漏洞，同时识别型号，同时又配对，同时又配对，同时又有型号，同时又有型号，同时又有型号的漏洞，同时又有型号的漏洞，并将复制，并修复其他类型的错误。