Abstract:During software development and maintenance, defect localization is an essential part of software quality assurance. Even though different techniques have been proposed for defect localization, i.e., information retrieval (IR)-based techniques and spectrum-based techniques, they can only work after the defect has been exposed, which can be too late and costly to adapt to the newly introduced bugs in the daily development. There are also many JIT defect prediction tools that have been proposed to predict the buggy commit. But these tools do not locate the suspicious buggy positions in the buggy commit. To assist developers to detect bugs in time and avoid introducing them, just-in-time (JIT) bug localization techniques have been proposed, which is targeting to locate suspicious buggy code after a change commit has been submitted. In this paper, we propose a novel JIT defect localization approach, named DeepDL (Deep Learning-based defect localization), to locate defect code lines within a defect introducing change. DeepDL employs a neural language model to capture the semantics of the code lines, in this way, the naturalness of each code line can be learned and converted to a suspiciousness score. The core of our DeepDL is a deep learning-based neural language model. We train the neural language model with previous snapshots (history versions) of a project so that it can calculate the naturalness of a piece of code. In its application, for a given new code change, DeepDL automatically assigns a suspiciousness score to each code line and sorts these code lines in descending order of this score. The code lines at the top of the list are considered as potential defect locations. Our tool can assist developers efficiently check buggy lines at an early stage, which is able to reduce the risk of introducing bugs in time and improve the developers’ confidence in the reliability of their software. We conducted an extensive experiment on 14 open source Java projects with a total of 11,615 buggy changes. We evaluate the experimental results considering four evaluation metrics. The experimental results show that our method outperforms the state-of-the-art by a substantial margin.

OdegVul: an Approach for Statement-Level Defect Prediction

Unifying Defect Prediction, Categorization, and Repair by Multi-Task Deep Learning

Predicting Defective Visual Code Changes in a Multi-Language AAA Video Game Project

Deep Learning for Just-In-Time Defect Prediction

LineVD: Statement-level Vulnerability Detection using Graph Neural Networks

Software visualization and deep transfer learning for effective software defect prediction

Defect Prediction With Semantics and Context Features of Codes Based on Graph Representation Learning

DeMuVGN: Effective Software Defect Prediction Model by Learning Multi-view Software Dependency via Graph Neural Networks

LineFlowDP: A Deep Learning-Based Two-Phase Approach for Line-Level Defect Prediction

An Approach to Semantic and Structural Features Learning for Software Defect Prediction

Deep Learning-Based Software Defect Prediction via Semantic Key Features of Source Code—Systematic Survey

Predicting Vulnerability In Large Codebases With Deep Code Representation

BugPre: an intelligent software version-to-version bug prediction system using graph convolutional neural networks

Software Defect Prediction Based on Deep Representation Learning of Source Code From Contextual Syntax and Semantic Graph

Scalable Defect Detection via Traversal on Code Graph

Fine-Grained Software Defect Prediction Based on the Method-Call Sequence

Attention based GRU-LSTM for software defect prediction

Software Defect Prediction via Transformer

Deep Just-In-Time Defect Localization

Deep Semantic Feature Learning for Software Defect Prediction

HGVul: A Code Vulnerability Detection Method Based on Heterogeneous Source-Level Intermediate Representation