Null Pointer Dereference Defect Detected Based on Region-Based Memory Model

DONG Yu-kun; GONG Yun-zhan; JIN Da-hai

doi:10.3969/j.issn.0372-2112.2014.09.013

您当前的位置：

首页 >

文章列表页 >

Null Pointer Dereference Defect Detected Based on Region-Based Memory Model

更新时间：2025-07-16

- Null Pointer Dereference Defect Detected Based on Region-Based Memory Model
- Acta Electronica Sinica Vol. 42, Issue 9, Pages: 1744-1752(2014)
- 作者机构：
  
  1. 北京邮电大学网络与交换技术国家重点实验室,北京,100876
  2. 中国石油大学(华东)计算机与通信工程学院,山东,青岛,266580
  3. 北京邮电大学网络与交换技术国家重点实验室,北京,100876
  4. 中国石油大学(华东)计算机与通信工程学院,山东,青岛,266580
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.0372-2112.2014.09.013
  CLC： TP311.5
- Published：2014
- 稿件说明：
移动端阅览
DONG Yu-kun, GONG Yun-zhan, JIN Da-hai. Null Pointer Dereference Defect Detected Based on Region-Based Memory Model[J]. Acta Electronica Sinica, 2014, 42(9): 1744-1752.
DOI：

DONG Yu-kun, GONG Yun-zhan, JIN Da-hai. Null Pointer Dereference Defect Detected Based on Region-Based Memory Model[J]. Acta Electronica Sinica, 2014, 42(9): 1744-1752. DOI： 10.3969/j.issn.0372-2112.2014.09.013.

摘要

为了实现对C程序中空指针引用的充分检测，本文提出了一种基于区域内存模型的空指针引用缺陷检测方法.首先，提出了基于区域的符号化三值逻辑（Region-based Symbolic Three-Valued Logic，RSTVL），RSTVL能够描述C程序运行时内存中数据结构的形态信息与变量的存储状态，以及可寻址表达式间的各种关系；其次，给出了基于抽象语法树与函数摘要识别被引用指针方法；最后，结合基于RSTVL的数据流分析结果，将对被引用指针的检测转换为对相应区域的检测，给出了空指针引用缺陷检测的方法，通过函数摘要实现过程间的空指针引用缺陷检测.对比实验结果表明，本文方法在保证一定检测准确率的前提下，能够极大的减少空指针引用缺陷的漏报.

Abstract

In order to fully detect null pointer dereference for C procedures

this paper introduces a method based on region-based memory model.Firstly

region-based symbolic three-valued logic(RSTVL)is proposed

which can describe shape of data structures

all kinds of memory states and relations of addressable expressions.Then

an approach to fully recognizing pointer dereferences based on abstract syntax tree and procedure summary is introduced.Furthermore

this paper introduces a null pointer dereference detection method

which translates pointer dereference detection into region detection applying the result of data flow analysis based on RSTVL

and detects interprocedural null pointer dereference based on procedure summary.Experiment results show that compared with DTSC_STVL and Klocwork9

the proposed method could dramatically reduce null pointer dereference false negative on the precondition of guarantee the detection precision.

关键词

Keywords

references

Views

1680

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Conditional Context-Aware Detection for Android Malicious Virtualization Apps

A Method of Variable Range Analysis Based on Abstract Interpretation and Its Applications

Precisely Detecting Buffer Overflow Vulnerabilities

A Technique of Similar Execution Paths Generation Based on Dynamic Synergy Bidirectional Mapping

Approach for Facilitating Structural Recovery by Clustering Use Cases

Related Author

MENG Zhao-yi

HUANG Wen-chao

ZHANG Wei-nan

XIONG Yan

YANG Zhao-hong

XIAO Qing

GONG Yun-zhan

WANG Ya-wen

Related Institution

School of Computer Science and Technology， Anhui University

School of Computer Science and Technology， University of Science and Technology of China

Department of Information Engineering Academy of Armored Force Engineering Beijing China

State Key Laboratory of Networking and Switching Technology Beijing University of Posts and Telecommunications Beijing China

Department of Information Engineering, Academy of Armored Force Engineering

⁰