Flash defect fuzzy evaluation tool oriented to compiled language AS3

Abstract

The invention provides a Flash defect fuzzy evaluation tool oriented to a compiled language AS3. Firstly, the adoption of a fuzzy test strategy is elaborated, and then a total architecture is described; the method mainly comprises the following steps: acquiring a grammar rule instance, modifying the grammar rule instance, generating an initial test code and a normalized code, compiling the test code to generate an executable file which can be identified by the AVM virtual machine, and modifying a selected algorithm strategy through different parameter configurations. The normalized code is used for enabling an initial test code which cannot be verified by a compiler to smoothly pass through the compiler to be verified and generate an executable file after being restrained and perfected. The Flash defect fuzzy evaluation tool provided by the invention has the advantages that the capability of finding the potential defects of the Flash software is strong, the effective rate of evaluationdata is high, the coverage rate of evaluation codes is high, and the mined Flash software errors can be captured in time.

Description

technical field [0001] The invention relates to a Flash defect fuzzy evaluation tool, in particular to a Flash defect fuzzy evaluation tool oriented to compiled language AS3, and belongs to the technical field of software fuzzy evaluation tools. Background technique [0002] With the rapid development of current computer and information network technology, the security of information storage, processing, and transmission is extremely important. It is the common responsibility of the whole society to discover software defects in time, deal with network threats, and prevent network crimes. Exploitable bugs and timely fixes are critical. [0003] At present, Adobe's Flash tool is widely used, but it has been exposed that there are a large number of security holes, which is controversial. AS (ActionScript) is a scripting language that supports Flash products. It is a completely object-oriented programming language. It has rich class libraries, powerful functions, and a syntax s...

AI Technical Summary

Problems solved by technology

[0009] One is that the current Flash tool is widely used, but security issues have always been an important concern of users, and frequent leaks have made Flash controversial.

A large number of websites on the market use Flash technology, and there are many new features of Flash technology, but many devices and different browsers do not support all the new features very well, and Flash technology is not even compatible with some common browsers. , there are too many loopholes and problems, resulting in inconsistent user experience of Flash technology under different browsers, and the experience of Flash technology under some browsers is very bad, which seriously restricts the development of Flash technology. To solve this problem, evaluation tools for Flash are needed , there is no such product with better performance in the existing technology, resulting in repeated testing of Flash, but still unable to solve the problem, which greatly increases the workload of developers

[0010] The second is that the performance and security of the evaluation tools in the existing technology are not good, and the pertinence is not strong. Architecture, research and development ideas and related technologies of the specific implementation process

Due to the low overall level of Flash defect evaluation tools in the prior art, the ability to find potential defects in Flash software is weak, the efficiency of evaluation data is low, and the coverage rate of evaluation code is low, and errors in Flash software cannot be mined and caught in time.

[0011] The third is that the evaluation tools of the existing technology lack a unified implementation standard, especially the implementation standards of the existing technology for Flash technology evaluation are too fragmented and lack consistency, and the Flash technology is too open to ensure the correctness and efficiency of the implementation. At the same time, the Flash technology There are many loopholes and defects, and there is a certain distance from standard to technology to application. Flash technology needs to be improved and perfected

However, the existing technology cannot find out the AS code fragments that can cause the AVM to crash, cannot further analyze and use them, cannot produce AS codes that can pass the compiler, and cannot generate SWF files through compilation to test Flashplayer in batches. It is not robust enough, not easy to maintain and expand, and has no practicability and promotion value for specific solutions to Flash defects

Images