Statically Checking The Validity Of Pointer Status In C/C++ Program

Statically checking the safety vulnerabilities caused by using invalid pointers in C/C++ programs is studied in this paper. By analyzing the representations and causes of the safety vulnerabilities, safety rules were constructed, with which we can detect invalid pointer references using the syntax-directed translation method during the program analysis.Based on bottom-up analysis and contract theory, this paper implemented the inter-procedural check of the pointer validity. Flow-sensitive analysis was used to treat with conditional statements, by analyzing conditional statements and tracing execution paths through the source code we can simulate the execution of the program and get precise check result. The method proposed in this paper was implemented in XDCHECK, a statically checking tool for C/C++ program, experimental results illustrate that this method is effective.