Abstract:Memory leak bugs are a major problem in C/C++ programs. They occur when memory objects are not deallocated.Developers need to manually deallocate these objects to prevent memory leaks. As such, several techniques have been proposed to automatically fix memory leaks. Although proposed approaches have merit in automatically fixing memory leaks, they present limitations. Static-based approaches attempt to trace the complete semantics of memory object across all paths. However, they have scalability-related challenges when the target program has a large number of leaked paths. On the other hand, dynamic approaches can spell out precise semantics of memory object only on a single execution path (not considering multiple execution paths). In this paper, we complement prior approaches by designing and implementing a novel framework named AddressWatcher. AddressWatcher allows the semantics of a memory object to be tracked on multiple execution paths as a dynamic approach. Addresswatcher accomplishes this by using a leak database that is designed to allow storing and comparing different execution paths of a leak over several test cases. We conduct an evaluation of AddressWatcher on a benchmark of five open-source packages, namely binutils, openssh, tmux, openssl and git. In 23 out of the 50 examined memory leak bugs, AddressWatcher correctly points to a free location to fix memory leaks. Moreover, we submitted 25 new pull requests (PRs) to 12 popular open-source project repositories. These PRs targeted the resolution of memory leaks within these repositories. Among these, 21 PRs were merged, addressing 5 open GitHub issues. In fact, a critical fix prompted a new version release for the calc repository, a program used to find large primes. Furthermore, our contributions through these PRs sparked intense discussions and appreciation in various repositories such as coturn, h2o, and radare2.

Demand-Driven Memory Leak Detection Based on Flow- and Context-Sensitive Pointer Analysis

A Projection-Based Approach for Memory Leak Detection

Modular Heap Abstraction-Based Memory Leak Detection for Heap-Manipulating Programs

A Dynamic Approach to Detecting, Eliminating and Fixing Memory Leaks

SDMA: A Simulation-Driven Dynamic Memory Allocator for Wireless Sensor Networks

Static Detection to Memory Leak Based on Model Checking

A Parallel Memory Defect Detection Method Based on Sparse-Value-Flow Graph

Memory Leak Detection in IoT Program Based on an Abstract Memory Model SeqMM

Dynamic Memory Testing Based on Source Code Instrumentation on Linux Platform

Semantics-based Memory Leak Detection for C Programs

Realization of Dynamic Memory Leak Detection Technology under Linux

Hybrid Static Method for Memory Leak Detection

A Dynamic Detection Method to C/C++ Programs Memory Vulnerabilities Based on Pointer Analysis

Pointer Analysis Algorithm in Static Buffer Overflow Analysis

A memory leak auto repair method based on control flow diagram

Seeker:Flow-sensitive Demand-driven Points-to Analysis

Safe Memory-Leak Fixing for C Programs

AddressWatcher: Sanitizer-Based Localization of Memory Leak Fixes

Thread-Sensitive Pointer Analysis for Inter-Thread Dataflow Detection.

Software Aging Detection Based on Differential Analysis: An Experimental Study

Smoke: scalable path-sensitive memory leak detection for millions of lines of code