Abstract:Defect localization aims to locate buggy program elements (e.g., buggy files, methods or lines of code) based on defect symptoms, e.g., bug reports or program spectrum. However, when we receive the defect symptoms, the defect has been exposed and negative impacts have been introduced. Thus, one challenging task is: whether we can locate buggy program prior to the appearance of the defect symptom (e.g., when buggy program elements are being committed to a version control system). We refer to this type of defect localization as “Just-In-Time (JIT) Defect localization”. Although many prior studies have proposed various JIT defect identification methods to identify whether a new change is buggy, these prior methods do not locate the suspicious positions. Thus, JIT defect localization is the next step of JIT defect identification (i.e., after a buggy change is identified, suspicious source code lines are located). To address this problem, we propose a two-phase framework, i.e., JIT defect identification and JIT defect localization. Given a new change, JIT defect identification will identify it as buggy change or clean change first. If a new change is identified as buggy, JIT defect localization will rank the source code lines introduced by the new change according to their suspiciousness scores. The source code lines ranked at the top of the list are estimated as the defect location. For JIT defect identification phase, we use 14 change-level features to build a classifier by following existing approach. For JIT defect localization phase, we propose a JIT defect localization approach that leverages software naturalness with the N-gram model. To evaluate the proposed framework, we conduct an empirical study on 14 open source projects with a total of 177,250 changes. The results show that software naturalness is effective for our JIT defect localization. Our model achieves a reasonable performance, and outperforms the two baselines (i.e., random guess and a static bug finder (i.e., PMD)) by a substantial margin in terms of four ranking measures.

Modificatory Indentification Algorithm Research for Source Code Oriented

Enhancing Bug-Inducing Commit Identification: A Fine-Grained Semantic Analysis Approach

Just-In-Time Defect Identification and Localization: A Two-Phase Framework.

Specifying and Detecting Behavioral Changes in Source Code Using Abstract Syntax Tree Differencing

Program Source-Code Re-Modularization Using a Discretized and Modified Sand Cat Swarm Optimization Algorithm

Research and Implementation of Structure Inspection Algorithm for C Program Code

Understanding Code Change with Micro-Changes

Crosscutting invariant and an efficient checking algorithm using program slicing

A Practical Black-Box Attack on Source Code Authorship Identification Classifiers

Auxiliary Method for Code Commit Comprehension Based on Core-Class Identification

A Duplicate Code Checking Algorithm for the Programming Experiment

Design and Implementation of a MOD Analysis Algorithm in the SUIF2 Compiler Infrastructure

Code function recognition approach based on LDA and static analysis

Lsiccds: Large Scale Incremental Code Clone Detection System

Detecting Source Code Changes to Maintain the Consistence of Behavioral Model

Research on Rules to Remove Variation in Source Codes

Improving Automatic Identification of Outdated Requirements by Using Closeness Analysis Based on Source Code Changes

Identifying use cases in source code

An Analysis Scheme of Source Code Information Based on Hierarchical Slice Model

An evolution analysis method based on fuzzy concept lattice and source code analysis

Modular Heap Abstraction-Based Code Clone Detection for Heap-Manipulating Programs