AUTOMATIC GENERATION OF ANALYSIS-EQUIVALENT APPLICATION CONSTRUCTS

摘要

A computer program to be subjected to static analysis includes at least one framework, in turn including high-level code and at least one configuration file. A specification which describes run-time behavior of the program, including run-time behavior of the at least one framework including the high-level code and the at least one configuration file, is created from the computer program. Based on the specification, synthetic high-level code which accurately simulates the run-time behavior of the at least one framework including the high-level code and the at least one configuration file, without framework usage, is created. Static analysis of the computer program is carried out based on the synthetic high-level code.

主权项

1. A method comprising:
accessing a computer program to be subjected to static analysis, said computer program comprising at least one framework, said at least one framework comprising high-level code and at least one configuration file; creating from said computer program a specification which describes run-time behavior of said program, including run-time behavior of said at least one framework comprising said high-level code and said at least one configuration file; based on said specification, generating synthetic high-level code which accurately simulates said run-time behavior of said at least one framework comprising said high-level code and said at least one configuration file, without framework usage; and carrying out said static analysis of said computer program, based on said synthetic high-level code.