Integer overflow fault detection method based on metamorphic relation

Abstract

The invention discloses an integer overflow fault detection method based on a metamorphic relation. The integer overflow fault detection method includes employing a static testing tool to perform static testing in a program to be detected, initially determining an integer variable might occurring of integer overflow and marking the integer variable as an integer overflow detection point; according to a 'definition-application' model containing an integer definition statement list and an integer application statement list, determining an integer identifier, referenced by the integer definition statement and integer application statement, of the integer overflow detection point as an overflow integer, and if the overflow integer contains integer dangerous application statement of an integer dangerous application statement list, the overflow integer is marked as a dangerous integer; finally, before the statement of the dangerous integer referenced by the source code of the program detected is executed, adopting the metamorphic relation method to detect whether or not the integer overflow fault occurs to the dangerous integer. The integer overflow fault is detected accurately and efficiently.

Description

technical field [0001] The invention relates to integer overflow fault detection in software, in particular to an integer overflow fault detection method based on metamorphic relations, which belongs to the field of software testing. Background technique [0002] Integer overflow faults are considered to be an important factor affecting the security of software systems. In order to detect the occurrence of such a failure, there are generally two methods. The first is static testing, also known as static review, through which some static review tools are used to review program source code or binary code according to set rules. The biggest advantage of this method is that it can be implemented automatically, avoiding manual participation, and improving the feasibility of the method. But its biggest disadvantage is the high rate of false alarms, that is, it will generate a large number of false failures. Because the defects or failures obtained through the static review tool...

AI Technical Summary

Problems solved by technology

However, there are difficulties in how to design effective test cases and how to judge whether the test case execution results are correct

These two problems greatly limit the application field of dynamic testing in integer overflow fault detection

Images