Abstract:Data-flow testing (DFT) aims to detect potential data interaction anomalies by focusing on the points at which variables receive values and the points at which these values are used. Such test objectives are referred as \emph{def-use pairs}. However, the complexity of DFT still overwhelms the testers in practice. To tackle this problem, we introduce a hybrid testing framework for data-flow based test generation: (1) The core of our framework is symbolic execution (SE), enhanced by a novel guided path exploration strategy to improve testing performance; and (2) we systematically cast DFT as reachability checking in software model checking (SMC) to complement SE, yielding practical DFT that combines the two techniques' strengths. We implemented our framework for C programs on top of the state-of-the-art symbolic execution engine KLEE and instantiated with three different software model checkers. Our evaluation on the 28,354 def-use pairs collected from 33 open-source and industrial program subjects shows (1) our SE-based approach can improve DFT performance by 15$\sim$48% in terms of testing time, compared with existing search strategies; and (2) our combined approach can further reduce testing time by 20.1$\sim$93.6%, and improve data-flow coverage by 27.8$\sim$45.2% by eliminating infeasible test objectives. Compared with the SMC-based approach alone, our combined approach can also reduce testing time by 19.9$\sim$23.8%, and improve data-flow coverage by 7$\sim$10%. This combined approach also enables the cross-checking of each component for reliable and robust testing results. We have made our testing framework and benchmarks publicly available to facilitate future research.

RESEARCH ON RUNTIME INFORMATION PROBLEM-SOLVING USING DATAFLOW ANALYSIS

BigDataflow: A Distributed Interprocedural Dataflow Analysis Framework

An Integration of Several Different Data Flow Analysis Techniques

Expression Optimization Basing on Data Flow Analysis

Context-dependent Flow-Sensitive Interprocedural Dataflow Analysis.

Finding Optimum Abstractions in Parametric Dataflow Analysis

PIPELINING SAFE METHOD--A NEW WAY TO SUPPORT DATA DEPENDENCE ANALYSIS FOR SOFTWARE PIPELINING

Dependence Analysis for C Programs with Combinability of Dataflow Facts under Consideration

A Runtime Approach for Software Fault Analysis Based on Interpolation

Data-Flow Based Model Analysis and Its Applications

Optimal and Perfectly Parallel Algorithms for On-demand Data-flow Analysis

Iterative-free Program Analysis

Improvement on data dependence analysis supporting software pipelining technique

Towards Efficient Data-flow Test Data Generation

An approach to analyzing dependency of concurrent programs

Offline Data Dependence Analysis to Facilitate Runtime Parallelism Extraction

Domain-Specific Framework for Performance Analysis

Automatic enhanced CDFG generation based on runtime instrumentation

Enabling Operator Reordering in Data Flow Programs Through Static Code Analysis

Control and Data Flow Execution of Java Programs

Control Flow-Guided SMT Solving for Program Verification