Abstract:It is a widely-adopted strategy for developers to monitor the values of program variables when debugging in practice. In particular, developers often set breakpoints at specific locations or execute the program step by step in the debugging mode to inspect if abnormal values or status will be observed for concerned variables. Such a practical debugging strategy can facilitate developers in understanding and localizing the target fault. This study aims to identify suspicious program variables of a given fault (i.e., denoted as fault-correlated variables) automatically, thus facilitating the debugging activities for developers. To the best of our knowledge, this is the finest granularity in fault localization (FL) so far, which can address the limitations of being coarse-grained as faced by existing FL techniques. However, isolating fault-correlated variables precisely is challenging since there are usually substantially different variables used or defined in a program, and plenty of them are in the same basic block which cannot be well discriminated from each other since they will be either executed or not against the given test suite. To address such challenges, this study presents IsoVar, a two-phase model to isolate fault-correlated variables. Specifically, IsoVar first performs statistical analysis based on variable execution matrices, which is a novel concept proposed in this study, to identify a set of suspicious variables. It then observes the impacts of those variables on the program dynamically after applying subtle mutations at the bytecode level, to further isolate fault-correlated variables. Extensive experiments on Defects4J and Bears demonstrate that IsoVar can outperform state-of-the-art techniques significantly (13.0% for MAP and 19.3% for MRR). More importantly, we incorporated IsoVar into 11 existing FL techniques as well as 14 automated program repair techniques, and found that IsoVar can significantly boost their performance.

A Variable Value Range Analysis Method Based on Path Propagation.

Vulnerability Detection System Based on Taint Range Propagation Analysis

A Value Set Analysis Refinement Approach Based on Conditional Merging and Lazy Constraint Solving

Static Information Flow Tracking Based Approach to Detect Input Validation Vulnerabilities

A Method for Detecting Code Security Vulnerability Based on Variables Tracking with Validated-Tree

Mitigating Access Control Vulnerabilities through Interactive Static Analysis.

A Program Vulnerabilities Detection Frame by Static Code Analysis and Model Checking

Data flow analysis for C program based on graph model

Taint Propagation Analysis Algorithm for Vulnerability Exploits Detection

Software Vulnerability Detection Method Based on the Lexical and Syntax Analysis

Towards Vulnerability Discovery Using Staged Program Analysis

Iterative-free Program Analysis

Method for Automated Detection of Suspicious Vulnerability Related to Numerical Stability

Effective Isolation of Fault-Correlated Variables via Statistical and Mutation Analysis

A Static Analyzer for Numerical Programs in C and Fortran

Program Verification Enhanced Precise Analysis of Interrupt-Driven Program Vulnerabilities

Accelerating High-Precision Vulnerability Detection in C Programs with Parallel Graph Summarization

Proactive Vulnerability Finding Via Information Flow Tracking

Flash vulnerability detection based on virtual execution and branch coverage

Toward Pointer-Analysis-Based Vulnerability Discovery in Human–Machine Pair Programming

Source Code Vulnerability Detection Technology Based on Taint Analysis