Residual investigation: Predictive and precise bug detection

Kaituo Li, Christoph Reichenbach, Christoph Csallner, Yannis Smaragdakis

Forskningsoutput: Kapitel i bok/rapport/Conference proceedingKonferenspaper i proceedingPeer review

10 Citeringar (SciVal)

Sammanfattning

We introduce the concept of "residual investigation" for program analysis. A residual investigation is a dynamic check installed as a result of running a static analysis that reports a possible program error. The purpose is to observe conditions that indicate whether the statically predicted program fault is likely to be realizable and relevant. The key feature of a residual investigation is that it has to be much more precise (i.e., with fewer false warnings) than the static analysis alone, yet significantly more general (i.e., reporting more errors) than the dynamic tests in the program's test suite pertinent to the statically reported error. That is, good residual investigations encode dynamic conditions that, when taken in conjunction with the static error report, increase confidence in the existence of an error, as well as its severity, without needing to directly observe a fault resulting from the error. We enhance the static analyzer FindBugs with several residual investigations, appropriately tuned to the static error patterns in FindBugs, and apply it to 7 large open-source systems and their native test suites. The result is an analysis with a low occurrence of false warnings ("false positives") while reporting several actual errors that would not have been detected by mere execution of a program's test suite.

Originalspråkengelska
Titel på värdpublikation2012 International Symposium on Software Testing and Analysis, ISSTA 2012 - Proceedings
FörlagAssociation for Computing Machinery (ACM)
Sidor298-308
Antal sidor11
ISBN (tryckt)9781450314541
DOI
StatusPublished - 2012 aug. 28
Externt publiceradJa
Evenemang21st International Symposium on Software Testing and Analysis, ISSTA 2012 - Minneapolis, MN, USA
Varaktighet: 2012 juli 152012 juli 20

Konferens

Konferens21st International Symposium on Software Testing and Analysis, ISSTA 2012
Land/TerritoriumUSA
OrtMinneapolis, MN
Period2012/07/152012/07/20

Ämnesklassifikation (UKÄ)

  • Programvaruteknik

Fingeravtryck

Utforska forskningsämnen för ”Residual investigation: Predictive and precise bug detection”. Tillsammans bildar de ett unikt fingeravtryck.

Citera det här