A variable value range analysis method based on path propagation

doi:10.1145/3630138.3630437

科研成果详情

题名	A variable value range analysis method based on path propagation
作者	Zhang，Tao; Chen，Xiarun; Chen，Zhong
发表日期	2023-09-24
会议名称	2023 International Conference on Power, Communication, Computing and Networking Technologies, PCCNT 2023
会议录名称	ACM International Conference Proceeding Series
会议日期	2023-09-24——2023-09-24
会议地点	chn,Wuhan
摘要	In modern research on program analysis and static vulnerability detection techniques, variables have consistently remained a critical focal point, especially concerning hazardous variables associated with crucial program operations. Analyzing the value ranges of variables in a program not only enhances the accuracy of program analysis but also provides further support for static vulnerability detection. This paper proposes a variable value range analysis method based on path analysis. By combining control flow graph analysis, data flow analysis, and abstract interpretation, it comprehensively analyzes the process from variable definition to its usage, iteratively capturing value ranges during the process to obtain more precise value range results. Experimental results demonstrate that the method presented in this paper accurately determines variable value ranges and is compatible with the analysis of various types of variables. Moreover, the paper's method successfully validates multiple security vulnerabilities, thereby substantiating its practical application value.
关键词	data flow analysis Program analysis range analysis
DOI	10.1145/3630138.3630437
URL	查看来源
语种	英语English
Scopus入藏号	2-s2.0-85183587584
引用统计
文献类型	会议论文
条目标识符	https://repository.uic.edu.cn/handle/39GCC9TT/13458
专题	个人在本单位外知识产出
通讯作者	Chen，Zhong
作者单位	School of Software and Microelectronics,Peking University,Beijing,China
推荐引用方式 GB/T 7714	Zhang，Tao,Chen，Xiarun,Chen，Zhong. A variable value range analysis method based on path propagation[C], 2023.