Combining Static and Dynamic Analysis for Bug Finding

Опубликовано 6 сентября 2016, 16:38

Many static and dynamic program analyses have been developed to improve program quality. Several of them are well known and widely used in practice. It is not entirely clear, however, how to put these analyses together to achieve their combined benefits. We are especially interested in completely automatic solutions that minimize the number of false bug warnings, since false bug warnings is one of the biggest problems in automatic bug finding. We have built a sequence of increasingly more powerful combinations of static and dynamic analyses for bug finding in the tools JCrasher, Check 'n' Crash, and DSD-Crasher. The tools are completely automatic and deal with false positive bug warnings both at the language and at the user level. We will compare the power and accuracy of the tools on concrete examples.