关键词: 缺陷检测, 缺陷模式, 空指针引用, 属性可靠分析

Abstract: In order to fully detect null pointer dereference defects for C procedures based on static analysis, this paper introduces a method based on property sound analysis. Firstly, defect pattern and feature of null pointer dereference are introduced. Then, the property sound analysis theory is proposed to detect null pointer dereference defects, and the point property of pointers is abstracted as attribute lattice. Through an abstract memory model and transfer function of each kind of statement, point-to property of each pointer can be get soundly, and null pointer dereference defects detection can be realized based on the point-to property of each referenced pointer. Experiment results of five real projects show that this method can fully detect null pointer dereference defects.

Key words: defect detection, defect pattern, null pointer dereference, property sound analysis