Automatically Validating Static Memory Leak Warnings for C / C + + Programs
LI Xiao,ZHOU Yan,LI Meng-Chen,CHEN Yuan-Jun,XU Guo-Qing,WANG Lin-Zhang,LI Xuan-Dong
DOI: https://doi.org/10.13328/j.cnki.jos.005189
2017-01-01
Abstract:Memory leak,which has perplexed software developers for a long time because of imperceptibility,is a very common bug for C/C++ programs and can do serious harm especially for long-running program or system software.Aiming at this problem,both static and dynamic program analysis techniques have been attempted.Dynamic program analysis technique detects memory leak by running the program,which has huge overhead and depends on the quality of test cases.Static analysis technology and automatic tools are widely used in the work of detecting memory leaks among academic community and industrial community.Since it uses conservative algorithm,Static analysis is able to detect a lot of defects but at the sometime increases the false positives,which needs manual confirmation.As manual confirmation is time-consuming and error prone,it limits the practicability of the technology.In this paper,a novel method to automatically validate static memory leak warnings is proposed based on concolic testing.First,drawing on the memory leak warnings given by static analysis report,the control flow of the target program is analyzed and the reachability of the target path is calculated.Then the path information is used to guide the concolic testing and execute program in the particular path.Finally,the static warnings is validated by tracking memory object during execution.Experimental results show that this method can effectively classify static warnings and significantly reduce the workload of manual validation.