基于整型区间集的数组越界静态自动测试方法研究

数组越界是软件中普遍存在的一种故障类型，并对软件安全造成了潜在的威胁．传统的故障检测使用程序插装的方法，并相应的以编译优化技术来排除掉多余的数组边界检查．这种检测方法不仅降低了程序运行效率，增加了开销，而且往往不能对故障进行彻底的测试，容易造成漏报．本文在对程序进行静态分析的基础上，通过引入区间概念，建立了整型区间集和数组区间集，进而给出了数组越界的故障模型，模型的建立对软件故障进行了规范．本文随后给出了故障检测算法，最后给出了实验．结果表明这种方法比以往的测试方法具有更强的故障检测能力．

Research on Static and Auto-Testing Method for Array Bounds Based on Integer Range Aggregation

As a kind of faults in programs, the issue of out of bound of arrays(OOB) threatens software security potentially. Conventional fault testing uses the method of code insertion, and eliminates the redundant array bound checking with optimization technique of compiling time. This method not only reduces the efficiency that programs run, but also increases the spending. Furthermore, it cannot test the programs thoroughly and results to miss some faults easily. On the basis of static analysis of programs, this paper introduces the corcopt of range and sets up integer and array range congregation. Then the paper presents a model of OOB faults. This model can standardizes the software faults. The paper presents a fault testing algorithm and gives experiment results. Experiment result shows that this method has stronger and better fault testing ability than the existing methods.