Method for performing static analysis on C++ virtual function call upon cfg (configuration) files

Abstract

The invention discloses a method for performing static analysis on C++ virtual function call upon cfg (configuration) files. The method is characterized by comprising the following steps: firstly, creating a multi-class new virtual function chain table and a multi-class virtual function initial position offset chain table; secondly, during the virtual function call, according to the dynamic type information and the static type information of a class-type pointer, returning the names of called virtual functions through the new virtual function chain table and the multi-class virtual function initial position offset chain table; uniquely determining the called virtual functions by combining parameters during the virtual function call. By using class files of compiler intermediate files of a compiler, the new virtual function chain table and the like according with the table creation rule of the compiler; by recording the static type and the dynamic type of the class-type pointer and combining the created new virtual function chain table and the like, information during dynamic operation is accurately acquired during the static analysis, and the called virtual functions are accurately determined, and therefore the accuracy of the static analysis is improved, and the program logic is satisfied more.

Description

technical field [0001] The invention relates to the field of software analysis, in particular to a method for statically analyzing C++ virtual function calls based on cfg files. Background technique [0002] With the progress of the times, the functions of software are becoming more and more complex, and users have higher and higher requirements for software. At the same time, with the development of computer-related technologies, the scale of software has become larger and larger, and the complexity of development has increased dramatically. [0003] With the increase of software scale, in order to ensure the software quality, the testing poses a greater challenge. Especially for special application scenarios such as real-time control, software failure will lead to immeasurable consequences, and the requirements for software reliability are higher. In order to ensure software reliability to the greatest extent, a large number of test software is required. [0004] In sof...

AI Technical Summary

Problems solved by technology

As the scale of software code increases, the running space expands sharply, and dynamic testing is difficult to achieve 100% coverage, leaving hidden dangers for software robustness and security. At the same time, with the increase of test coverage, the cost of testing is also increasing sharply.