Research And Implementation Of A Global Data Flow Analysis Method

Data flow analysis plays an important role in the field of software static analysis.It is based on syntax analysis and semantic analysis technology to determine the definition and use of variables.Global data flow analysis has been the focus and difficulty of data flow analysis.In data flow analysis,which variables are related to and which variables are affected of a target variable is focused.As is known,at present,there is no static analysis tool for the implementation of the target point of global input and effect analysis.This paper presents a method of analysing global data flow,which contains two parts:local analysis and global analysis.Firstly,by analyzing the abstract syntax tree and control flow graph of the tested project,this paper constructs an abstract definition information model for the definition structure of each variable,described by quaternion,thus the local analysis is implemented.Then,a function summary model is proposed,which can solve the problem of parameter transfer,function side effect and function return value through function summary.Finally,according to the above analysis results,the target point oriented input domain and effect domain analysis are implemented.The method proposed in this paper can be both used in static defect detection to analyse the external input of the program associated with the inspection point,and used to analyse the transmission of unreliable input data and to deduce the source analysis which can trigger the vulnerability from the sensitive point of the program.