Broadening horizons of multilingual static analysis
| Autor: | Hyogun Lee, Sukyoung Ryu, Sungho Lee |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Java
Computer science Java Native Interface Semantics (computer science) Programming language Foreign language 020207 software engineering 02 engineering and technology Static analysis Semantics computer.software_genre Interoperation Program analysis Software bug 0202 electrical engineering electronic engineering information engineering Language interoperability Compiler computer computer.programming_language |
| Zdroj: | ASE |
| DOI: | 10.1145/3324884.3416558 |
| Popis: | Most programming languages support foreign language interoperation that allows developers to integrate multiple modules implemented in different languages into a single multilingual program. While utilizing various features from multiple languages expands expressivity, differences in language semantics require developers to understand the semantics of multiple languages and their inter-operation. Because current compilers do not support compile-time checking for interoperation, they do not help developers avoid in-teroperation bugs. Similarly, active research on static analysis and bug detection has been focusing on programs written in a single language. In this paper, we propose a novel approach to analyze multilingual programs statically. Unlike existing approaches that extend a static analyzer for a host language to support analysis of foreign function calls, our approach extracts semantic summaries from programs written in guest languages using a modular analysis technique, and performs a whole-program analysis with the extracted semantic summaries. To show practicality of our approach, we design and implement a static analyzer for multilingual programs, which analyzes JNI interoperation between Java and C. Our empirical evaluation shows that the analyzer is scalable in that it can construct call graphs for large programs that use JNI interoperation, and useful in that it found 74 genuine interoperation bugs in real-world Android JNI applications. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|