Research Of Function-Summary-Based Inter-Procedural Static Analysis For C++

As information technology progresses, the complexity and scale of the software itself also will extend continuously. How to ensure software quality has always been a hot research field in computer science. This paper studies static analysis for C++ based on defects, how to improve testing tools with the global analysis methods. Based on abstract interpretation theory, using the function summary way we abstract the run-time behavior and characteristics of function into four-tuples:the type with the function parameters, return values, constraints, side effects to provide global analysis of information support.In this paper, based on the DTS_CPP framework, we add the global type analysis, and improve the control flow graph about the exception path analysis. According to global function calls, we obtain the logical orders of analysis program unit, to provide the basis for calculating the function summary. Finally, we add the calculation module of function summary into DTS_CPP, and modify the existing fault detention algorithms to adapt to global analysis. In addition, this paper also designed the way of using extensible XML language to solve the problem about library functions summary.This paper designs regression testing framework for DTS_CPP tools, through the collection of the 1836 use cases as the benchmark and 10 open-source C/C++projects to evaluate the global analysis algorithms and the performance of DTS_CPP. In the modified DTS_CPP, we derived average defect density is 2/Kloc about 10 projects in experiment, increased nearly doubled compare to local analysis, while the false positive rate reduces from 60% to 40%. The experiment data shows the inter-procedural analysis based on function summary can effectively improve the static analysis system in the number of detected defects and reduce false positive rate.