Advertisement

A Practical String Analyzer by the Widening Approach

  • Tae-Hyoung Choi
  • Oukseh Lee
  • Hyunha Kim
  • Kyung-Goo Doh
Part of the Lecture Notes in Computer Science book series (LNCS, volume 4279)

Abstract

The static determination of approximated values of string expressions has many potential applications. For instance, approximated string values may be used to check the validity and security of generated strings, as well as to collect the useful string properties. Previous string analysis efforts have been focused primarily on the maxmization of the precision of regular approximations of strings. These methods have not been completely satisfactory due to the difficulties in dealing with heap variables and context sensitivity. In this paper, we present an abstract-interpretation-based solution that employs a heuristic widening method. The presented solution is implemented and compared to JSA. In most cases, our solution gives results as precise as those produced by previous methods, and it makes the additional contribution of easily dealing with heap variables and context sensitivity in a very natural way. We anticipate the employment of our method in practical applications.

Keywords

String Operator Regular Expression Widening Operator Abstract Domain Context Sensitivity 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Chase, D.R., Wegman, M., Zadeck, F.K.: Analysis of pointers and structures. In: Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 296–310. ACM Press, New York (1990)Google Scholar
  2. 2.
    Christensen, A.S., Møller, A., Schwartzbach, M.I.: Precise analysis of string expressions. In: Cousot, R. (ed.) SAS 2003. LNCS, vol. 2694, pp. 1–18. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  3. 3.
    Cousot, P., Cousot, R.: Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints. In: Proceedings of the ACM Symposium on Principles of Programming Languages, pp. 238–252 (January 1977)Google Scholar
  4. 4.
    Cousot, P., Cousot, R.: Abstract interpretation frameworks. Journal of Logic and Computation 2(4), 511–547 (1992)MATHCrossRefMathSciNetGoogle Scholar
  5. 5.
    Gould, C., Su, Z., Devanbu, P.: Static checking of dynamically generated queries in database applications. In: Proceedings of the International Conference on Software Engineering, pp. 645–654 (May 2004)Google Scholar
  6. 6.
    Kirkegaard, C., Møller, A.: Static analysis for java servlets and JSP. In: Yi, K. (ed.) SAS 2006. LNCS, vol. 4134, pp. 336–352. Springer, Heidelberg (2006)CrossRefGoogle Scholar
  7. 7.
    Minamide, Y.: Static approximation of dynamically generated web pages. In: Proceedings of the International World Wide Web Conference Committee, pp. 432–441 (2005)Google Scholar
  8. 8.
    Mohri, M., Nederhof, M.-J.: Regular approximation of context-free grammars through transformation. In: Junqua, J.-C., van Noord, G. (eds.) Robustness in Language and Speech Technology, pp. 153–163. Kluwer Academic Publishers, Dordrecht (2001)Google Scholar
  9. 9.
    Nielson, F., Nielson, H.R.: Infinitary control flow analysis: a collecting semantics for closure analysis. In: Proceedings of the ACM Symposium on Principles of Programming Languages, pp. 332–345. ACM Press, New York (1997)Google Scholar
  10. 10.
    Shivers, O.: Control flow analysis in scheme. In: Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation (June 1988)Google Scholar
  11. 11.
    Tabuchi, N., Sumii, E., Yonezawa, A.: Regular expression types for strings in a text processing language. In: Proceedings of Workshop on Types in Programming, pp. 1–18 (July 2002)Google Scholar
  12. 12.
    Thiemann, P.: Grammar-based analysis string expressions. In: Proceedings of the ACM Workshop on Types in Language Design and Implementation, pp. 59–70 (2004)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • Tae-Hyoung Choi
    • 1
  • Oukseh Lee
    • 1
  • Hyunha Kim
    • 1
  • Kyung-Goo Doh
    • 1
  1. 1.Department of Computer Science and EngineeringHanyang UniversityAnsanKorea

Personalised recommendations