JP2016128941A - Output determination device, output determination method, output determination program, and static analysis device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To extract information that is very likely to be faulty from the information outputted relating to a source program by a static analysis program.SOLUTION: An output determination device 101 has: a process extraction unit 102 for specifying a first function including instruction statements in a source program and extracting a first function identifier on the basis of a flow extracted from the source program by static analysis means and instruction statements extracted from the flow; a function extraction unit 103 for specifying, in the source program, a second function that calls the first function and extracting a second function identifier, as well as specifying a third function called by the first function and extracting a third function identifier; and an output determination unit 104 for determining whether each of the first, second, and third function identifiers extracted from the first and second source programs matches, and determining that when all are found matching, a second flow extracted in the second source program by the static analysis means be not outputted, and when one of them is found not matching, the second flow be outputted.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an output determination device that selects appropriate information from information output according to a static analysis program, for example.

  The static analysis program analyzes a source program with respect to computer software (hereinafter referred to as “software”) without analyzing the object program, thereby analyzing a defect or the like included in the software. The static analysis program provides information for supporting software development by pointing out a part (flow) determined to be a defect in the source program.

  However, the static analysis program may determine that the flow is defective even though it is not actually a defect in the source program. In this case, the developer needs to confirm whether or not the flow pointed out by the static analysis program is actually a malfunction. Therefore, when software development is supported using a static analysis program, it takes a lot of time to check whether the indicated flow is a problem when actually executed. There is.

  As an example of a method for solving this problem, regarding a certain source program, a flow in which a static analysis program has not been pointed out as a problem in the past (referred to as “first flow”) and a new problem have been pointed out. There is a method for determining whether or not the flow (represented as “second flow”) is similar. This method determines that the second flow is not defective when it is determined that the first flow and the second flow are similar. For example, Patent Document 1 discloses an analysis apparatus that can reduce the above-described time.

  Patent Document 1 discloses an analysis device that outputs a warning text based on a result of analyzing a source program using a static analysis program. The analysis apparatus creates a file representing the result of analyzing the source program for each of a plurality of versions, and creates a difference between the files. Next, the analysis apparatus outputs a warning text associated with the created difference.

JP 2004-126866 A

  However, as described above, the static analysis program may make a determination error when determining a defect based on the similarity between the first flow and the second flow. For example, when verifying two source codes (clone code) similar to each other, the static analysis program may determine that the newly pointed second flow is not defective. This is because the clone code is similar to each other and the static analysis program determines that the first flow and the second flow are similar. In this case, even if the second flow is actually a failure, the developer overlooks that it is a failure.

  On the other hand, if the static analysis program strictly determines whether or not the first flow and the second flow are similar, the possibility of overlooking that the second flow is defective can be reduced. it can. However, in this case, the static analysis program outputs more defects. As a result, when software development is supported using a static analysis program, there is a problem that it takes a lot of time to check whether or not there is a problem when the flow is actually executed. .

  Therefore, a main object of the present invention is to provide an output determination device or the like that extracts information that is likely to be defective when the source program is executed from information that the static analysis program outputs regarding the source program. It is.

In order to achieve the above-described object, as one aspect of the present invention, the output determination device includes a flow extracted from the source program and a statement extracted from the flow by a static analysis unit that statically analyzes the source program. And a process extracting unit that identifies a first function including the statement in the source program, and extracts a function identifier that can uniquely identify the function as the first function identifier with respect to the identified first function;
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is A function extracting means for identifying a third function called by the function to be represented and extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) output determining means for determining that the second flow is to be output when it is determined that either does not match.

As another aspect of the present invention, the output determination method is:
Information processing device
Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, With respect to the identified first function, a function identifier that can uniquely identify the function is extracted as a first function identifier,
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is Identifying a third function called by the function to be represented, extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) If it is determined that either does not match, it is determined to output the second flow.

  Further, the same object is realized by such an output determination program and a computer-readable recording medium for recording the program.

  According to the output determination apparatus and the like according to the present invention, information that is highly likely to be defective when the source program is executed can be extracted from information output by the static analysis program regarding the source program.

It is a block diagram which shows the structure which the output determination apparatus which concerns on the 1st Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 1st Embodiment. It is a figure showing an example of the 1st source program. It is a figure showing an example of the 1st source program. It is a figure showing an example of a 2nd source program. It is a figure showing an example of a 2nd source program. It is a figure showing an example of the flow extracted according to the static analysis program. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 2nd Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 2nd Embodiment. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 3rd Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 3rd Embodiment. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 4th Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 4th Embodiment. It is a figure which expresses an example of the standard referred when an output determination part determines. It is a figure which represents notionally an example of the call graph information based on a 1st source program. It is a figure showing notionally an example of call graph information based on the 2nd source program. It is a figure which represents an example of difference information notionally. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 5th Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 5th Embodiment. It is a figure showing an example of a 2nd source program. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 6th Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 6th Embodiment. It is a figure showing an example of a 2nd source program. It is a block diagram which shows the structure which the output determination apparatus which concerns on the 7th Embodiment of this invention has. It is a flowchart which shows the flow of a process in the output determination apparatus which concerns on 7th Embodiment. It is a block diagram which shows roughly the hardware structural example of the calculation processing apparatus which can implement | achieve the output determination apparatus which concerns on each embodiment of this invention.

  In order to facilitate understanding of the present invention, terms and assumptions used in the following description will be described.

  A static analysis unit that executes processing according to a static analysis program receives, for example, a source program, and a flow related to bugs inherent in the received source program or security vulnerabilities (part of the source program) And calculate a statement. There may be a plurality of flows and statements calculated by the static analysis unit.

  The flow determination unit compares the flow and the instruction sentence calculated by the static analysis program with respect to the source program before the modification and the flow and the instruction sentence calculated by the static analysis program with respect to the source program after the modification. . The flow determination unit determines not to output the flow, for example, when it is determined that the flow before and after the modification and the statement match. On the other hand, the flow determination unit determines to output the flow, for example, when it is determined that the flow before and after the modification and the command statement do not match. When there are a plurality of flows and command statements calculated by the static analysis program, the flow determination unit executes the processing described above for each flow and command statement.

  When the source program is managed using versions, the source program before being modified and the source program after being modified are source programs specified using two versions. Good. Further, the flow calculated by the static analysis program represents, for example, an instruction sentence string from an instruction sentence estimated to be related to a bug or the like to the calculated instruction sentence.

  The output determination apparatus shown in each of the following embodiments can assist, for example, in determining whether or not a flow determination unit as described above outputs a flow.

  Next, embodiments for carrying out the present invention will be described in detail with reference to the drawings.

<First Embodiment>
The configuration of the output determination apparatus 101 according to the first embodiment of the present invention will be described in detail with reference to FIG. FIG. 1 is a block diagram illustrating a configuration of the output determination apparatus 101 according to the first embodiment of the present invention.

  The output determination apparatus 101 according to the first embodiment includes a process extraction unit 102, a function extraction unit 103, and an output determination unit 104.

  The output determination apparatus 101 receives, for example, the first source program 301, the flow 303 extracted in the first source program 301 according to the static analysis program, and the imperative sentence 305 extracted in the flow 303 according to the static analysis program. To do. Similarly, the output determination apparatus 101 includes, for example, the second source program 302, the flow 304 extracted in the second source program 302 according to the static analysis program, and the command statement 306 extracted in the flow 304 according to the static analysis program. And receive.

  For example, the first source program 301 is a source program written according to a programming language as exemplified in FIGS. 3A and 3B. 3A and 3B are diagrams illustrating an example of the first source program 301 described according to the C language. For example, the second source program 302 is a source program written according to a programming language as exemplified in FIGS. 4A and 4B. 4A and 4B are diagrams illustrating an example of the second source program 302 described according to the C language. The first source program 301 and the second source program 302 are source programs before and after modification as described above, for example.

  In this case, for example, with respect to the source program before modification (that is, the first source program 301), the static analysis program calculates the flow 303 and the command statement 305. Further, regarding the modified source program (that is, the second source program 302), the static analysis program calculates a flow 304 and a command statement 306.

  In the source program illustrated in FIG. 3A or FIG. 4A, the statement “#define ERROR 0” represents a statement that sets “ERROR” to 0. In “int_main ()”, “main ()” represents a main function, and “int” represents a return value that is an output of the main function in an “int” type (for example, a type representing an integer). Represents something. “Rv = funcB (X)” represents a setting command statement that calls the function funcB with an argument X representing a variable to be input / output, and then sets the return value of the function funcB to the variable rv. In this case, the caller function of funcB is “main”.

  In the source program illustrated in FIG. 3A or FIG. 4A, “command” represents an instruction sentence (or instruction sentence string) that does not transfer processing to the outside of the function. Further, “return v” represents a command statement that sets the return value of the function funcB and ends the processing.

  In the source program illustrated in FIG. 3B or FIG. 4B, “if (U == NULL)” represents a control command statement, and when the value of the variable U is a null value (NULL), {} Indicates that the command statement sequence enclosed by is executed. The control command statement indicates that a command statement sequence enclosed in {} immediately after “else” is executed when the value of the variable U is not a null value (NULL).

  For example, it is assumed that the flow illustrated in FIG. 5 (that is, the flow 303 or the flow 304) is extracted in the first source program 301 or the second source program 302 according to the static analysis program. FIG. 5 is a diagram illustrating an example of a flow extracted according to the static analysis program. Further, it is assumed that “printf (“% s ”, X)” is extracted as a command statement (that is, command statement 305 or command statement 306) in the flow according to the static analysis program. That is, in this example, it is assumed that the flow 303 extracted in the first source program 301 according to the static analysis program is the same as the flow 304 extracted in the second source program 302. Similarly, it is assumed that the command statement 305 extracted in the first source program 301 according to the static analysis program is the same as the command statement 306 extracted in the second source program 302.

  Next, processing performed by the output determination apparatus 101 according to the first embodiment will be described in detail with reference to FIG. FIG. 2 is a flowchart showing a process flow in the output determination apparatus 101 according to the first embodiment. For convenience of explanation, it is assumed that the source program is described using the C language, but may be described using another programming language.

  First, the process extraction unit 102 specifies a function including the command statement 305 (represented as “first function” for convenience of description) in the first source program 301 (step S101). Similarly, the process extraction unit 102 specifies a function including the command statement 306 in the second source program 302 (step S101).

  For example, in the case of the source program illustrated in FIG. 3A, the function funcB includes the statement “printf (“% s ”, X)”, so that the process extraction unit 102 includes the first function in the first source program 301. The function funcB is selected. Similarly, in the case of the source program illustrated in FIG. 4A, the function funcB includes the statement “printf (“% s ”, X)”, so that the process extraction unit 102 uses the first function in the second source program 302. The function funcB is specified as follows.

  Next, the function extraction unit 103 identifies a function that calls the first function (represented as “second function” for convenience of description) in the first source program 301 (step S102). Similarly, the function extraction unit 103 specifies a function that calls the first function in the second source program 302 (step S102).

  For example, in the case of the source program illustrated in FIG. 3A, the function main calls the function funcB with the statement “rv = funcB (X)”, so that the function extraction unit 103 uses the second function in the first source program 301. The function main is specified as Similarly, in the case of the source program illustrated in FIG. 4A, the function main calls the function funcB with the statement “rv = funcB (X)”. A function main is specified as a function.

  Next, the function extraction unit 103 identifies a function that is called by the first function (represented as “third function” for convenience of description) in the first source program 301 (step S103). Similarly, the function extraction unit 103 specifies a function called by the first function in the second source program 302 (step S103).

  For example, in the case of the source program illustrated in FIG. 3A, the function funcB calls the function funcC with the statement “v = funcC (X)”, so that the function extraction unit 103 uses the third function in the first source program 301. The function funcC is specified as follows. Similarly, in the case of the source program illustrated in FIG. 4A, the function main calls the function funcC with the statement “v = funcC (X)”. A function funcC is specified as a function.

  Next, the output determination unit 104 determines whether or not the function specified by the function extraction unit 103 in the first source program 301 matches the function specified by the function extraction unit 103 in the second source program 302 ( Step S104). For example, the output determination unit 104 matches the name of the first function (function identifier) specified in the first source program 301 with the name of the first function (function identifier) specified in the second source program 302. It is determined whether or not. The function identifier represents an identifier that can uniquely identify the function. Further, the output determination unit 104 determines whether or not the name of the second function specified in the first source program 301 matches the name of the second function specified in the second source program 302. Similarly, the output determination unit 104 determines whether or not the name of the third function specified in the first source program 301 matches the name of the third function specified in the second source program 302.

  Next, when determining that the function specified in the first source program 301 matches the function specified in the second source program 302 (YES in step S104), the output determination unit 104 represents an output. As the flow 307, it is determined to output the flow 304 (step S106). Note that the output determination unit 104 may determine to output the flow 303 as the flow 307 if YES in step S104. When the output determination unit 104 determines that the function specified in the first source program 301 and the function specified in the second source program 302 do not match (NO in step S104), the flow 304 It is determined not to output (step S105). In the above-described processing, the specified function represents the first function to the third function.

  For example, in the example shown in FIGS. 3A, 3B, 4A, and 4B, the output determination unit 104 specifies the first function funcB specified in the first source program 301 and the second source program 302. The generated first function funcB is compared. In this case, the names of the two first functions match. Similarly, the output determination unit 104 compares the second function main specified in the first source program 301 with the second function main specified in the second source program 302. In this case, the names of the two second functions match. Further, the output determination unit 104 compares the third function funcC specified in the first source program 301 with the third function funcC specified in the second source program 302. In this case, the names of the two second functions match. In this case, since all the functions match, the output determination unit 104 determines that the function specified in the first source program 301 matches the function specified in the second source program 302.

  Hereinafter, for convenience of explanation, the processing to be executed when YES is determined in step S104 is represented as “processing b”. In addition, the process that is executed when it is determined NO in step S104 is represented as “process a”.

  For example, in the example described above, the process a includes a process of determining that the flow 304 is not output. Further, the process b includes a process for determining that the flow 304 is output.

  Next, effects related to the output determination device 101 according to the first embodiment will be described.

  According to the output determination apparatus 101, information that is likely to be a malfunction when the source program is executed can be extracted from information output by the static analysis program regarding the source program.

  The reason for this is that the output determination apparatus 101 according to the present embodiment is based on a result of comparing processing related to function calls with respect to a plurality of flows output by the static analysis program (that is, the flow 303 or the flow 304). This is because it is determined whether or not to output. In this process, the output determination apparatus 101 receives the function identifier of the first function including the command statement, the function identifier of the second function that calls the function, and the function identifier of the third function that the function calls. The program 301 and the second source program 302 are compared. As a result, the output determination apparatus 101 determines whether or not to output a flow based on the result of comparing the processes related to the function call.

  On the other hand, the analysis device disclosed in Patent Document 1 simply compares files representing the results output by the static analysis program, and outputs a warning text according to the comparison results. That is, the analysis device outputs a warning text based only on the file. As a result, since the analysis device does not compare the processing related to the function call compared to the output determination device according to the present embodiment, there is a high possibility of outputting an erroneous warning text.

  Therefore, according to the output determination apparatus 101 according to the present embodiment, information that is likely to be defective when the source program is executed can be extracted from the information output by the static analysis program regarding the source program. .

  In the above-described embodiment, the output determination device 101 extracts the first function to the third function in the source pro program. For example, the output determination apparatus 101 may extract the first function to the third function based on call graph information (for example, FIG. 13 and FIG. 14) as will be described later, or by analyzing the source program. The first function to the third function may be extracted.

  In addition, a static analysis device having the output determination device 101 and a static analysis unit that executes processing according to the static analysis program described above can be configured. In this case, the static analysis device calculates a flow and a statement by executing the above-described processing based on the two source programs.

<Second Embodiment>
Next, a second embodiment of the present invention based on the first embodiment described above will be described.

  In the following description, the characteristic parts according to the present embodiment will be mainly described, and the same components as those in the first embodiment described above will be denoted by the same reference numerals, and redundant description will be omitted. To do.

  The configuration of the output determination device 201 according to the second embodiment and the processing performed by the output determination device 201 will be described with reference to FIGS. FIG. 6 is a block diagram showing the configuration of the output determination apparatus 201 according to the second embodiment of the present invention. FIG. 7 is a flowchart showing the flow of processing in the output determination device 201 according to the second embodiment.

  The output determination apparatus 201 according to the second embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 202, and an output determination unit 203.

  The output determination unit 203 performs the same processing as the processing performed by the output determination unit 104 according to the first embodiment, and then specifies the function specified for the first source program 301 and the second source program 302. Judge whether the function matches. When the type extraction unit 202 determines that the output determination unit 203 does not match (NO in step S104, FIG. 2), it starts the processing described below.

  The type extraction unit 202 specifies the type of the value output by the third function specified by the first source program 301 in the first source program 301 (step S201). That is, the type extraction unit 202 identifies the return type of the third function in the first source program 301. For convenience of explanation, the type of the value output by the third function is represented as “third type”. Similarly, the type extraction unit 202 specifies the third type of the value output by the third function specified by the second source program 302 in the second source program 302 (step S202).

  For example, when specifying the return type of the third function funcC, the type extraction unit 202 first specifies “unsigned int funcC (char * U)” (FIG. 3B) in the first source program 301. Next, the type extraction unit 202 specifies that the third type of the value output by the third function funcC is the “unsigned int” type in the first source program 301. Similarly, the type extraction unit 202 specifies “int_funcC (char * U)” (FIG. 4B) in the second source program 302 when specifying the return value type of the third function funcC. Next, the type extraction unit 202 specifies that the third type of the value output by the third function funcC is the “int” type in the second source program 302.

  Next, the output determination unit 203 determines whether or not the third type specified in the first source program 301 matches the third type specified in the second source program 302 (step S203). ). When determining that the two types match (YES in step S203), the output determining unit 203 determines not to output the flow 304 (step S204). When determining that the two third types do not match (NO in step S203), the output determining unit 203 determines to output the flow 304 (step S205). Note that the output determination unit 203 may determine to output the flow 303 if YES in step S205.

  In the example described above, the third type related to the third function funcC specified in the first source program 301 is the “unsigned int” type. The third type related to the third function funcC specified in the second source program 302 is an “int” type. Accordingly, since the two third types do not match, the output determination unit 203 determines NO in step S203. Therefore, in this case, the output determination unit 203 determines to output the flow 304.

  Hereinafter, for convenience of explanation, the process to be executed when YES is determined in step S203 is represented as “process c”. In addition, the process executed when NO is determined in step S203 is represented as “process d”.

  For example, in the above-described example, the process c includes a process for determining that the flow 304 is not output. The process d includes a process for determining that the flow 304 is to be output.

  Next, effects related to the output determination device 201 according to the second embodiment will be described.

  According to the output determination apparatus 201 according to the second embodiment, information that is likely to be a malfunction when the source program is executed can be extracted from information output by the static analysis program regarding the source program. it can.

  This is because the output determination apparatus 201 according to the present embodiment further determines whether or not to output the flow 304 based on the type of value output by the third function.

  That is, the output determination apparatus 201 according to the present embodiment determines whether or not to output the flow 304 based on the type of the value output from the third function in addition to the function identifier related to the function call. As a result, since the output determination device 201 further analyzes the function in detail compared to the output determination device 101 according to the first embodiment, information can be extracted more appropriately.

<Third Embodiment>
Next, a third embodiment of the present invention based on the above-described second embodiment will be described.

  In the following description, the description will focus on the characteristic parts according to the present embodiment, and the same components as those in the second embodiment described above will be denoted by the same reference numerals, and redundant description will be omitted. To do.

  The configuration of the output determination device 211 according to the third embodiment and the processing performed by the output determination device 211 will be described with reference to FIGS. 8 and 9. FIG. 8 is a block diagram showing the configuration of the output determination device 211 according to the third embodiment of the present invention. FIG. 9 is a flowchart showing a flow of processing in the output determination device 211 according to the third embodiment.

  The output determination apparatus 211 according to the third embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 212, and an output determination unit 213.

  If it is determined that the output determining unit 203 matches (YES in step S203, FIG. 7), the type extracting unit 212 starts the processing described below.

  The type extraction unit 212 specifies the type of the value output from the first function specified in the first source program 301 and the type of the value output from the second function specified in the first source program 301 (step S211).

  For convenience of explanation, the type of the value output by the first function is represented as “first type”. The type of the value output by the second function is represented as “second type”. That is, the first type represents a type related to the return value of the first function. The second type represents a type related to the return value of the second function.

  Similarly, the type extraction unit 212 specifies the first type related to the first function specified in the second source program 302 and the second type related to the second function specified in the second source program 302 ( Step S212).

  For example, in the first source program 301, the type extraction unit 212 specifies the command sentence “int funcB (char * X)” (FIG. 3A) regarding the first function funcB. The type extraction unit 212 specifies that the first type of the value output by the first function funcB is the “int” type based on the specified statement. Similarly, the type extraction unit 212 identifies the statement “int main ()” (FIG. 3A) for the second function main in the first source program 301. Next, the type extraction unit 212 specifies that the second type of the value output by the second function main is the “int” type based on the specified statement.

  Similarly, the type extraction unit 212 identifies the statement “int funcB (char * X)” (FIG. 4A) for the first function funcB in the second source program 302. The type extraction unit 212 specifies that the first type of the value output by the first function funcB is the “int” type based on the specified statement. In the second source program 302, the type extracting unit 212 identifies the statement “int main ()” (FIG. 4A) regarding the second function main. Next, the type extraction unit 212 specifies that the second type of the value output by the second function main is the “int” type based on the specified statement.

  Next, the output determination unit 213 determines whether or not the first type specified in the first source program 301 matches the first type specified in the second source program 302. The output determining unit 213 determines whether the second type specified in the first source program 301 matches the second type specified in the second source program 302 (step S213). . When determining that both match (YES in step S213), the output determining unit 213 determines not to output the flow 304 (step S214). When determining that either does not match (NO in step S213), the output determining unit 213 determines to output the flow 304 (step S215). Note that the output determination unit 213 may determine to output the flow 303 when NO in step S213.

  In the example described above, the third type does not match. For convenience of explanation, it is assumed that the third type matches in the following embodiments.

  The first type related to the first function funcB specified in the first source program 301 is an “int” type. The first type related to the first function funcB specified in the second source program 302 is an “int” type. Thus, the two first types match. The second type related to the second function main specified in the first source program 301 is an “int” type. The second type related to the second function main specified in the second source program 302 is an “int” type. Thus, the two second types match. Accordingly, since the types of the first function and the second function match, the output determination unit 213 determines YES in step S213. Therefore, in this case, the output determination unit 213 determines not to output the flow 304.

  Hereinafter, for convenience of explanation, the process to be executed when YES is determined in step S213 is referred to as “process e”. In addition, the process executed when NO is determined in step S213 is represented as “process f”.

  For example, in the above-described example, the process e includes a process for determining that the flow 304 is not output. The process f includes a process for determining that the flow 304 is to be output.

  Next, effects related to the output determination device 211 according to the third embodiment will be described.

  According to the output determination device 211 according to the present embodiment, it is possible to select appropriate information from information output by the static analysis program. Furthermore, according to the output determination device 211 according to the present embodiment, information that is likely to be a malfunction when the source program is executed is more appropriate from the information output by the static analysis program regarding the source program. Can be extracted.

The reason is Reason 1 and Reason 2. That is,
(Reason 1) The configuration of the output determination device 211 according to the third embodiment includes the configuration of the output determination device 201 according to the second embodiment.
(Reason 2) This is because the output determination device 211 according to the present embodiment further determines whether or not to output based on the function type.

  That is, the output determination device 211 according to the present embodiment determines whether or not to output the flow 304 based on the first type to the third type. As a result, since the output determination device 211 further analyzes the function in more detail than the output determination device 201 according to the second embodiment, information can be extracted more appropriately.

<Fourth Embodiment>
Next, a fourth embodiment of the present invention based on the second embodiment will be described.

  In the following description, the description will focus on the characteristic parts according to the present embodiment, and the same components as those in the second embodiment described above will be denoted by the same reference numerals, and redundant description will be omitted. To do.

  The configuration of the output determination device 221 according to the fourth embodiment and the processing performed by the output determination device 221 will be described with reference to FIGS. 10 and 11. FIG. 10 is a block diagram showing the configuration of the output determination device 221 according to the fourth embodiment of the present invention. FIG. 11 is a flowchart showing the flow of processing in the output determination device 221 according to the fourth embodiment.

  The output determination device 221 according to the fourth embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 202, an output determination unit 222, and a variable extraction unit 223.

  The variable extraction unit 223 starts the following process in the process c or the process e described above.

  The variable extraction unit 223 specifies a variable representing input / output with respect to the first function with respect to the first function specified in the first source program 301. That is, the variable extraction unit 223 specifies a variable representing an argument of the first function. For example, the variable extraction unit 223 specifies a variable identifier that can identify the variable representing the input / output (step S221). Similarly, with respect to the first function specified in the second source program 302, the variable extraction unit 223 specifies a variable identifier of a variable representing input / output with respect to the first function (step S222).

  For example, in the example illustrated in FIG. 3A, the variable extraction unit 223 specifies the instruction sentence “int funcB (char * X)” in the first source program 301 for the first function funcB. Next, the variable extraction unit 223 specifies that the variable representing the input / output with respect to the first function funcB is the variable represented by the variable identifier X based on the identified statement. In this case, the variable extraction unit 223 may further specify that the type representing the variable identifier X is the “char *” type.

  Similarly, in the example illustrated in FIG. 4A, the variable extraction unit 223 specifies an instruction sentence “int funcB (char * X)” in the second source program 302 with respect to the first function funcB. Next, the variable extraction unit 223 specifies that the variable representing the input / output with respect to the first function funcB is the variable represented by the variable identifier X based on the identified statement. In this case, the variable extraction unit 223 may further specify that the type representing the variable identifier X is the “char *” type.

  When there are a plurality of variables to be input / output, the variable extraction unit 223 may specify the variable identifier of each variable.

  Next, the output determination unit 222 determines whether or not the variable identifier specified in the first source program 301 matches the variable identifier specified in the second source program 302 (step S223). When determining that the variable identifiers match (YES in step S223), the output determining unit 222 determines not to output the flow 304 (step S224). When determining that the variable identifiers do not match (NO in step S223), the output determining unit 222 determines to output the flow 304 (step S225). Note that the output determination unit 222 may determine to output the flow 303 when NO in step S225.

  In the example described above, the variable identifier X specified in the first source program 301 matches the variable identifier X specified in the second source program 302. In this case, the output determination unit 222 determines that the variable identifiers related to the first function funcB match between the first source program 301 and the second source program 302. Therefore, the output determination unit 222 determines not to output the flow 304.

  Hereinafter, for convenience of explanation, the process to be executed when YES is determined in step S223 is represented as “process g”. In addition, the process executed when NO is determined in step S223 is represented as “process h”.

  For example, in the above-described example, the process g includes a process for determining that the flow 304 is not output. Further, the process h includes a process of determining that the flow 304 is output.

  The output determination unit 222 may not only determine whether or not the variable identifiers match, but may further determine whether or not the types of the variable identifiers match. In this case, the output determination unit 222 determines not to output the flow 304 when both the variable identifier and the type of the variable identifier match. On the other hand, the output determination unit 222 determines to output the flow 304 when any of the variable identifier and the type of the variable identifier does not match.

  Alternatively, as illustrated in FIG. 12, the output determination unit 222 includes a type representing a variable value representing input / output to the first function, a type representing a variable value representing input / output to the second function, and a third function. The determination may be made by referring to the type representing the value of the variable representing the input / output for. FIG. 12 is a diagram conceptually illustrating an example of a reference referred to when the output determination unit 222 determines.

  Referring to FIG. 12, a function, a function identifier of the function, a value type output by the function, a variable type that is an argument of the function, and a variable identifier of the variable are associated with each other. In FIG. 12, “refer” indicates that the output determination unit 222 refers to as a criterion for determination. “Do not reference” indicates that the output determining unit 222 does not refer to the criterion.

That is, in the criteria illustrated in FIG. 12, the output determination unit 222 refers to items 1 to 8 as criteria for determination. That is,
(Item 1) Function identifier of the second function,
(Item 2) Function identifier of the first function,
(Item 3) Function identifier of the third function,
(Item 4) Type of value output by the third function,
(Item 5) The type of the variable that is the argument of the second function,
(Item 6) The type of the variable that is the argument of the first function,
(Item 7) Type of variable that is an argument of the third function,
(Item 8) A variable identifier of a variable that is an argument of the first function.

  That is, in this case, the output determination unit 222 compares the first source program 301 and the second source program 302 from the viewpoint of items 1 to 8, and if any item does not match, the flow 304 Is determined to be output. Further, the output determination unit 222 determines not to output the flow 304 when all of the items 1 to 8 match.

  Next, effects related to the output determination device 221 according to the fourth embodiment will be described.

  According to the output determination device 221 according to the present embodiment, information that is likely to be defective when the source program is executed can be extracted from the information output by the static analysis program regarding the source program. Furthermore, according to the output determination device 221 according to the present embodiment, information can be extracted more appropriately.

The reason is Reason 1 and Reason 2. That is,
(Reason 1) The configuration of the output determination device 221 according to the fourth embodiment includes the configuration of the output determination device 201 according to the second embodiment.
(Reason 2) This is because the output determination device 221 according to the present embodiment further determines whether or not to output based on the variable identifier of the variable representing the input / output with respect to the function.

  That is, the output determination device 221 according to the present embodiment determines whether or not to output based on the above-described information in addition to the function identifier related to the function call. As a result, the output determination device 221 further analyzes the function in more detail than the output determination device 201 according to the second embodiment, so that information can be extracted more appropriately.

  In the above-described example, the function identifiers of the first function to the third function, the type of value output by the first function to the third function, the variable identifier of the variable representing the input / output to the first function, and the Whether or not to output the flow was determined based on the type of variable identifier. For example, the output determination device 221 may determine whether or not to output a flow based on call graph information (illustrated in FIGS. 13 and 14) representing information as described above. FIG. 13 is a diagram conceptually illustrating an example of the call graph information 401 based on the first source program 301. FIG. 14 is a diagram conceptually illustrating an example of the call graph information 401 based on the second source program 302.

  The call graph information 401 is variable information including function call information 402 representing a function described in a source program based on the function call, a value type output by the function, and a variable identifier representing an argument of the function. 403. In the function call information 402, for example, the relationship between functions that the first function calls the third function is represented as an arrow line connecting the first function and the third function. In the variable information 403, a function, a value type output by the function, a variable identifier representing an argument of the function, and a value type of the variable identifier are associated with each other. Note that the number of variable identifiers representing function arguments may be plural.

  For example, referring to the function call information 402 illustrated in FIG. 13, the description “main → funcB → funcC” indicates that the function main calls the function funcB and the function funcB calls the function funcC. Referring to the variable information 403 illustrated in FIG. 13, for example, “funcC”, “unsigned int”, and “U” are associated with each other. This indicates that the type of the variable output by the function funcC is “unsigned int” type, and the variable identifier representing the argument of the function funcC is U.

  For example, the output determination device 221 compares the function included in the first source program 301 with the function included in the second source program 302, and outputs the comparison result as difference information as illustrated in FIG. Also good. FIG. 15 is a diagram conceptually illustrating an example of difference information. Alternatively, when the difference information illustrated in FIG. 15 is calculated, the output determination device 221 may execute the above-described process based on the difference information.

  In the difference information illustrated in FIG. 15, each item illustrated in the variable information 403 illustrated in FIG. 13 is associated with a difference that is a result of comparing the variable information 403 illustrated in FIGS. 13 and 14. For example, in the fifth line of FIG. 15, “funcC return value type” is associated with “present”. This indicates that there is a difference between the first source program 301 and the second source program 302 with respect to the “funcC return value type (int)”. In addition, “variable identifier (U) of funcC” is associated with “none”. This indicates that there is no difference between the first source program 301 and the second source program 302 with respect to the “funcC variable identifier (U)”.

<Fifth Embodiment>
Next, a fifth embodiment of the present invention based on the above-described fourth embodiment will be described.

  In the following description, the characteristic part according to the present embodiment will be mainly described, and the same configuration as that of the above-described fourth embodiment will be denoted by the same reference numeral, and redundant description will be omitted. To do.

  The configuration of the output determination device 231 according to the fifth embodiment and the processing performed by the output determination device 231 will be described with reference to FIGS. 16 and 17. FIG. 16 is a block diagram showing the configuration of the output determination device 231 according to the fifth embodiment of the present invention. FIG. 17 is a flowchart showing a flow of processing in the output determination device 231 according to the fifth embodiment.

  The output determination device 231 according to the fifth embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 202, an output determination unit 233, a variable extraction unit 223, and a first variable unit 232. Have. The output determination device 231 may further include a variable information unit 234.

  The first variable unit 232 starts the following process in the process h described above. That is, the first variable unit 232 includes at least one of a variable identifier representing an argument related to the first function, an argument type related to the first function, an argument type related to the second function, or an argument type related to the third function. When there is a difference between items, the following processing is started.

  For convenience of explanation, a variable which is a target having a difference in a variable identifier (or argument type) representing an argument between the first source program 301 and the second source program 302 is represented as “difference variable”.

  In the second source program 302, the first variable unit 232 first sets a value in the difference variable by tracking the instruction sentence string from the instruction sentence 306 to the instruction sentence including the variable identifier representing the difference variable in reverse order. A setting command statement to be set is specified (step S231).

  For example, the setting command statement is a command statement including a variable identifier on the left side of “=” and including a variable identifier, a numerical value, a calculation formula, a function, or the like on the right side of “=”.

  For example, assume that the second source program 302 is a source program as illustrated in FIG. FIG. 18 is a diagram illustrating an example of the second source program 302. Further, it is assumed that the command statement 306 is “printf (“% d ”, X)”. Furthermore, it is assumed that the variable identifier representing the difference variable is X.

  In this case, the first variable unit 232 first reads the command sentence “X = D + B”. Since the read command statement is a command statement that sets an operation result of “D + B” to X, and X is a difference variable, the first variable unit 232 first sets a value to the difference variable. It is determined that the command statement is set.

  Next, the first variable unit 232 specifies a variable identifier that is a basis for setting a value for the difference variable in the specified command statement, and stores the specified variable identifier in the variable information unit 234 (step S232).

  In the case of the above-described example, the first variable unit 232 identifies the variable identifier D and the variable identifier B by reading the right side of the identified statement (ie, “D + B”), the variable identifier D, Stored in the variable identifier B and the variable information section 234.

  Next, the output determination unit 233 determines whether there is a variable identifier that matches the variable identifier representing the difference variable among the variable identifiers stored in the variable information unit 234 (step S233). When the variable information unit 234 determines that the difference variable is included (YES in step S233), the output determination unit 233 determines to output the flow 304 (step S234). When the variable information unit 234 determines that the difference variable is not included (NO in step S233), the output determination unit 233 determines not to output the flow 304 (step S235).

  Next, effects related to the output determination device 231 according to the fifth embodiment will be described.

  According to the output determination device 231 according to the present embodiment, information that is likely to be a malfunction when the source program is executed can be extracted from information output by the static analysis program regarding the source program. Furthermore, according to the output determination device 231 according to the present embodiment, information can be further appropriately extracted from information output by the static analysis program.

The reason is Reason 1 and Reason 2. That is,
(Reason 1) The configuration of the output determination device 231 according to the fifth embodiment includes the configuration of the output determination device 221 according to the fourth embodiment.
(Reason 2) This is because the output determination unit 233 determines whether or not the difference variable is related to the execution of the command statement 306 extracted according to the static analysis program.

  When determining that the variable information unit 234 includes a difference variable, the output determination unit 233 determines that the difference variable is related to the execution of the command statement 306. In this case, the output determination unit 233 determines to output the flow 304. The output determination unit 233 determines that the difference variable is not related to the execution of the command statement 306 when the variable information unit 234 determines that the variable does not include the difference variable. In this case, the output determination unit 233 determines not to output the flow 304.

  Therefore, since the output determination device 231 determines whether or not the difference variable affects the execution of the command statement 306, information can be extracted more appropriately.

<Sixth Embodiment>
Next, a sixth embodiment of the present invention based on the above-described fourth embodiment will be described.

  In the following description, the characteristic part according to the present embodiment will be mainly described, and the same configuration as that of the above-described fourth embodiment will be denoted by the same reference numeral, and redundant description will be omitted. To do.

  The configuration of the output determination device 241 according to the sixth embodiment and the processing performed by the output determination device 241 will be described with reference to FIGS. 19 and 20. FIG. 19 is a block diagram showing the configuration of the output determination device 241 according to the sixth embodiment of the present invention. FIG. 20 is a flowchart showing the flow of processing in the output determination device 241 according to the sixth embodiment.

  The output determination device 241 according to the sixth embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 202, an output determination unit 243, a variable extraction unit 223, and a second variable unit 242. Have. The output determination device 241 may further include a variable information unit 234 and a first variable unit 232.

  The second variable unit 242 starts the following process in the process h described above. That is, the second variable unit 242 has at least one of a variable identifier representing an argument related to the first function, an argument type related to the first function, an argument type related to the second function, or an argument type related to the third function. When there is a difference, the following processing is started.

  Whether or not the second variable unit 242 executes the command statement 306 by tracking the command statement string from the command statement 306 to the command including the variable identifier representing the difference variable in the second source program 302 in reverse order. A control command statement that determines whether or not is specified (step S241).

  For example, it is assumed that the second source program 302 is a source program as illustrated in FIG. FIG. 21 is a diagram illustrating an example of the second source program 302. Further, it is assumed that the command statement 306 is “X = W + 1”. Furthermore, it is assumed that the variable identifier representing the difference variable is X.

  In this case, the second variable unit 242 first reads the command statement “if (D! = 1)” by tracing one command statement from the command statement 306 in reverse order. Since the read command statement is an “if” command statement representing a conditional branch, the second variable unit 242 determines that the command statement is a control command statement regarding whether to execute the command statement 306.

  For example, the control command statement is the “if” command statement described above, a “while” command statement indicating that the processing is repeated until the condition is satisfied, a “for” command statement that repeats the processing a certain number of times, or the like.

  Next, the second variable unit 242 specifies a variable identifier related to whether or not to execute the command statement 306 in the specified control command statement, and stores the specified variable identifier in the variable information unit 234 (step S242). In other words, the second variable unit 242 specifies a variable identifier included in the condition that constitutes the specified control command statement.

  For example, in the example described above, the second variable unit 242 specifies that the variable identifier D in the command statement “if (D! = 1)” is a variable identifier related to whether or not the command statement 306 is executed, The identified variable identifier D is stored in the variable information unit 234.

  Next, the output determination device 241 determines whether there is a variable identifier that matches the variable identifier representing the difference variable among the variable identifiers stored in the variable information unit 234 (step S243). When the variable information unit 234 determines that the difference variable is included (YES in step S243), the output determination unit 243 determines to output the flow 304 (step S244). When the variable information unit 234 determines that the difference variable is not included (NO in step S243), the output determination unit 243 determines not to output the flow 304 (step S245).

  Next, effects related to the output determination device 241 according to the sixth embodiment will be described.

  According to the output determination device 241 according to the present embodiment, information that is likely to be a malfunction when the source program is executed can be extracted from information output by the static analysis program regarding the source program. Furthermore, according to the output determination device 241 according to the present embodiment, information can be further appropriately extracted from information output by the static analysis program.

The reason is Reason 1 and Reason 2. That is,
(Reason 1) The configuration of the output determination device 241 according to the sixth embodiment includes the configuration of the output determination device 221 according to the fourth embodiment.
(Reason 2) The output determination unit 243 determines whether or not the difference variable is related to the condition that constitutes the control command statement that controls whether or not the command statement 306 extracted according to the static analysis program is executed. Because.

  The output determining unit 243 determines that the difference variable is related to the execution of the command statement 306 when the variable information unit 234 determines that the variable variable includes the difference variable. In this case, the output determination unit 243 determines to output the flow 304. Further, when the variable information unit 234 determines that the variable information unit 234 does not include the difference variable, the output determination unit 243 determines that the difference variable is not related to the execution of the command statement 306. In this case, the output determination unit 233 determines not to output the flow 304.

  Therefore, since the output determination device 241 determines whether or not the difference variable affects the execution of the command statement 306, information can be extracted more appropriately.

<Seventh Embodiment>
Next, a seventh embodiment of the present invention based on the sixth embodiment described above will be described.

  In the following description, the characteristic parts according to the present embodiment will be mainly described, and the same components as those in the above-described sixth embodiment will be denoted by the same reference numerals, and redundant description will be omitted. To do.

  The configuration of the output determination device 251 according to the seventh embodiment and the processing performed by the output determination device 251 will be described with reference to FIGS. FIG. 22 is a block diagram showing the configuration of the output determination device 251 according to the seventh embodiment of the present invention. FIG. 23 is a flowchart showing the flow of processing in the output determination device 251 according to the seventh embodiment.

  The output determination device 251 according to the seventh embodiment includes a process extraction unit 102, a function extraction unit 103, a type extraction unit 202, a second variable unit 242, an output determination unit 253, a variable extraction unit 223, And a third variable unit 252. The output determination device 241 may further include a variable information unit 234 and a first variable unit 232.

  After the second variable unit 242 specifies the variable identifier included in the control command statement in accordance with the process shown in step S242, the third variable unit 252 starts the process related to the variable identifier specified by the second variable unit 242. To do.

  In the second source program 302, the third variable unit 252 performs a process of tracing in reverse order the command statement string from the control command statement specified by the second variable unit 242 to the command statement including the variable identifier representing the difference variable. Start. In this case, the third variable unit 252 specifies a setting command statement that first sets a value to the variable represented by the variable identifier specified by the second variable unit 242 (step S253).

  In the example described above, in the case of the source program illustrated in FIG. 21, the second variable unit 242 identifies the variable identifier D and the control command statement “if (D! = 1)”. The third variable unit 252 reads “D = Y + B”, which is the previous command statement of the control command statement “if (D! = 1)”. Since the read command statement is a setting command statement that sets a value in the variable identifier D, the third variable unit 252 specifies that the read command statement is a setting command statement that sets a value in the variable identifier D.

  Next, the third variable unit 252 identifies a variable identifier that is a basis for setting a value to the variable identifier identified by the second variable unit 242 in the identified setting command statement, and the identified variable identifier is the variable information unit 234. (Step S254).

  In the case of the example described above, the third variable unit 252 identifies the variable identifier Y and the variable identifier B by reading the right side of the identified command statement (ie, “Y + B”), the variable identifier Y, Stored in the variable identifier B and the variable information section 234.

  Next, the output determination unit 253 determines whether there is a variable identifier that matches the variable identifier representing the difference variable among the variable identifiers stored in the variable information unit 234 (step S255). When variable information unit 234 determines that the difference variable is included (YES in step S255), output determination unit 253 determines to output flow 304 (step S257). When the variable information unit 234 determines that the difference variable is not included (NO in step S255), the output determination unit 253 determines not to output the flow 304 (step S256).

  Next, effects related to the output determination device 251 according to the seventh embodiment will be described.

  According to the output determination device 251 according to the present embodiment, information that is likely to be defective when the source program is executed can be extracted from information output by the static analysis program regarding the source program. Furthermore, according to the output determination device 251 according to the present embodiment, information can be further appropriately extracted from information output by the static analysis program.

The reason is Reason 1 and Reason 2. That is,
(Reason 1) The configuration of the output determination device 251 according to the seventh embodiment includes the configuration of the output determination device 241 according to the sixth embodiment.
(Reason 2) Regarding a condition constituting a control command statement for controlling whether or not to execute the command statement 306 extracted according to the static analysis program, a difference is added to a variable serving as a basis for determining whether or not the condition is satisfied. This is because the output determination unit 253 determines whether or not variables are related.

  When determining that the variable information unit 234 includes a difference variable, the output determination unit 253 determines that the difference variable is related to the condition of the control command statement. As a result, the output determination unit 253 determines that the difference variable is related to the execution of the command statement 306. In this case, the output determination unit 253 determines to output the flow 304.

  The output determining unit 253 determines that the difference variable is not related to the condition of the control command statement when the variable information unit 234 determines that the variable variable does not include the difference variable. As a result, the output determination unit 253 determines that the difference variable is not related to the execution of the command statement 306. In this case, the output determination unit 233 determines not to output the flow 304.

  Therefore, the output determination device 251 determines whether or not the difference variable affects the execution of the command statement 306, so that information can be extracted more appropriately.

(Hardware configuration example)
A configuration example of hardware resources for realizing the output determination device in each embodiment of the present invention described above using one calculation processing device (information processing device, computer) will be described. However, the output determination device may be realized using at least two calculation processing devices physically or functionally. The output determination device may be realized as a dedicated device.

  FIG. 24 is a diagram schematically illustrating a hardware configuration example of a calculation processing apparatus capable of realizing the output determination apparatus according to the first to seventh embodiments. The computing device 20 includes a central processing unit (Central Processing Unit, hereinafter referred to as “CPU”) 21, a memory 22, a disk 23, and a nonvolatile recording medium 24. The calculation processing device 20 further includes an input device 25, an output device 26, a communication interface (hereinafter referred to as “communication IF”) 27, and a display 28. The calculation processing device 20 can transmit / receive information to / from other calculation processing devices and communication devices via the communication IF 27.

  The nonvolatile recording medium 24 is, for example, a compact disc (Compact Disc) or a digital versatile disc (Digital_Versatile_Disc) that can be read by a computer. The nonvolatile recording medium 24 may be a universal serial bus memory (USB memory), a solid state drive (Solid_State_Drive), or the like. The non-volatile recording medium 24 retains such a program without being supplied with power, and can be carried. The nonvolatile recording medium 24 is not limited to the above-described medium. Further, the program may be carried via the communication network via the communication IF 27 instead of the nonvolatile recording medium 24.

  That is, the CPU 21 copies a software program (computer program: hereinafter simply referred to as “program”) stored in the disk 23 to the memory 22 when executing it, and executes arithmetic processing. The CPU 21 reads data necessary for program execution from the memory 22. When the display is necessary, the CPU 21 displays the output result on the display 28. When output to the outside is necessary, the CPU 21 outputs an output result to the output device 26. When inputting a program from the outside, the CPU 21 reads the program from the input device 25. The CPU 21 outputs an output determination program (shown in FIG. 1) in the memory 22 corresponding to the function (process) represented by each unit shown in FIG. 1, FIG. 6, FIG. 8, FIG. 10, FIG. 2, FIG. 7, FIG. 9, FIG. 11, FIG. 17, FIG. 20, or FIG. The CPU 21 sequentially performs the processes described in the above-described embodiments of the present invention.

  That is, in such a case, it can be understood that the present invention can also be achieved by such an output determination program. Furthermore, it can be understood that the present invention can also be realized by a computer-readable non-volatile recording medium in which the output determination program is recorded.

  The present invention has been described above using the above-described embodiment as an exemplary example. However, the present invention is not limited to the above-described embodiment. That is, the present invention can apply various modes that can be understood by those skilled in the art within the scope of the present invention.

In addition, a part or all of each embodiment mentioned above can be described also as the following additional remarks. However, the present invention described by way of example with the above-described embodiments is not limited to the following. That is,
(Appendix 1)
Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, A process extracting means for extracting, as the first function identifier, a function identifier that can uniquely identify the function with respect to the identified first function;
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is A function extracting means for identifying a third function called by the function to be represented and extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) output determination means for determining to output the second flow when it is determined that either of them does not match. Fixed device.

(Appendix 2)
The source program further comprises type extracting means for extracting the type of the value output by the third function,
In the case of (a), the output determining means, for the third function, does the type extracted in the first source program match the type extracted in the second source program? (C) If it is determined that they match, the second flow is not output, and (d) if it is determined that they do not match, the second flow is output. Output determination according to appendix 1 apparatus.

(Appendix 3)
In the case of (c), the type extracting means further extracts a value type output from the first function and a value type output from the second function in the source program,
The output determining means determines whether the type related to the first function specified in the first source program matches the type related to the first function specified in the second source program; and It is determined whether or not the type related to the second function specified in the first source program matches the type related to the second function specified in the second source program. The output determination device according to claim 2, wherein the second flow is not output when it is determined that they match, and (f) the second flow is output when it is determined that either does not match.

(Appendix 4)
In the case of (c) or (e), the source program further comprises variable extraction means for extracting a variable identifier representing a variable related to input / output with respect to the first function,
The output determining means determines whether or not the variable identifier extracted in the first source program matches the variable identifier extracted in the second source program, and (g) determines that they match. In this case, the second flow is not output, and (h) the second flow is output when it is determined that they do not coincide with each other.

(Appendix 5)
The variable extraction unit further extracts a variable type related to input / output with respect to the first function to the third function in the source program,
The output determining means includes
Whether the type of each variable related to the first function extracted in the first source program matches the type of each variable related to the first function extracted in the second source program;
Whether the type of each variable related to the second function extracted in the first source program matches the type of each variable related to the second function extracted in the second source program;
It is determined whether the type of each variable related to the third function extracted in the first source program matches the type of each variable related to the third function extracted in the second source program. The output determination device according to claim 4, wherein the second flow is not output when it is determined that they match, and the second flow is output when any of them does not match.

(Appendix 6)
In the case of (h), by tracing the source program in reverse order, the statement including the variable identifier representing the variable that does not match in (h) is extracted from the statement extracted from the flow. In the command statement string that first reaches the command statement including the variable identifier, the command statement that sets a value to the variable that does not match is specified, and the variable that constitutes the command statement to be set is specified and specified. First variable means for storing the variable identifier representing the variable in variable information means;
The output determining means determines whether or not the variable identifier representing the variable that does not match in (h) is included in the variable information means, and if included, outputs the second flow and includes If not, the output determination device according to Supplementary Note 4 or Supplementary Note 5, wherein the second flow is not output.

(Appendix 7)
In the case of (h), by tracing the source program in reverse order, the instruction sentence including the variable identifier representing the variable that does not match in (h) is extracted from the instruction sentence extracted from the flow. Among them, in a command statement string that first reaches a command statement including the variable identifier, a control command statement that controls whether or not the command statement is executed is specified, and the variable that is included in the control command statement is represented. The variable information means further includes second variable means for extracting the variable identifier and storing the extracted variable identifier in the variable information means. The output determining means includes the variable identifier representing the variable that does not match. The output determination apparatus according to appendix 6.

(Appendix 8)
In the case of (h), by tracing the source program in reverse order, a setting command statement for setting a value is specified in the variable identifier extracted by the second variable means, and the specified setting command The output determination device according to claim 7, further comprising: third variable means for specifying the variable identifier that is a basis for calculating the value by a sentence and storing the specified variable identifier in the variable information means.

(Appendix 9)
The static analysis means;
A static analysis device comprising: the output determination device according to any one of supplementary notes 1 to 8.

(Appendix 10)
Information processing device
Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, With respect to the identified first function, a function identifier that can uniquely identify the function is extracted as a first function identifier,
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is Identifying a third function called by the function to be represented, extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) An output determination method for determining to output the second flow when it is determined that any of them does not match.

(Appendix 11)
Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, A process extraction function for extracting, as the first function identifier, a function identifier that can uniquely identify the function with respect to the identified first function;
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is A function extraction function for identifying a third function called by the function to be represented and extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function extracted in the first source program Whether the identifier matches the second function identifier extracted in the second source program, and the third function identifier extracted in the first source program, and extracted in the second source program It is determined whether or not the third function identifier matches, and (a) when it is determined that both match, the second flow extracted by the static analysis means in the second source program is not output. , (B) an output determination function for determining that the second flow is output when it is determined that either of them does not match. Output judgment program to be realized

DESCRIPTION OF SYMBOLS 101 Output determination apparatus 102 Process extraction part 103 Function extraction part 104 Output determination part 301 1st source program 302 2nd source program 303 Flow 304 Flow 305 Instruction sentence 306 Instruction sentence 307 Flow 201 Output determination apparatus 202 Type extraction part 203 Output determination part 211 output determination device 212 type extraction unit 213 output determination unit 221 output determination device 222 output determination unit 223 variable extraction unit 231 output determination device 232 first variable unit 233 output determination unit 234 variable information unit 241 output determination device 242 second variable unit 243 output determination unit 251 output determination device 252 third variable unit 253 output determination unit 401 call graph information 402 function call information 403 variable information 20 calculation processing device 21 CPU
22 Memory 23 Disk 24 Non-volatile recording medium 25 Input device 26 Output device 27 Communication IF
28 Display

Claims (10)

Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, A process extracting means for extracting, as the first function identifier, a function identifier that can uniquely identify the function with respect to the identified first function;
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is A function extracting means for identifying a third function called by the function to be represented and extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) output determination means for determining to output the second flow when it is determined that either of them does not match. Fixed device. The source program further comprises type extracting means for extracting the type of the value output by the third function,
In the case of (a), the output determining means, for the third function, does the type extracted in the first source program match the type extracted in the second source program? 2. The output according to claim 1, wherein (2) the second flow is output when (c) it is determined that they do not match, and (d) when it is determined that they do not match. Judgment device. In the case of (c), the type extracting means further extracts a value type output from the first function and a value type output from the second function in the source program,
The output determining means determines whether the type related to the first function specified in the first source program matches the type related to the first function specified in the second source program; and It is determined whether or not the type related to the second function specified in the first source program matches the type related to the second function specified in the second source program. 3. The output determination device according to claim 2, wherein the second flow is not output when it is determined that the two match, and (f) the second flow is output when it is determined that either does not match. In the case of (c) or (e), the source program further comprises variable extraction means for extracting a variable identifier representing a variable related to input / output with respect to the first function,
The output determining means determines whether or not the variable identifier extracted in the first source program matches the variable identifier extracted in the second source program, and (g) determines that they match. The output determination apparatus according to claim 2 or 3, wherein the second flow is not output, and (h) the second flow is output when it is determined that they do not match. The variable extraction unit further extracts a variable type related to input / output with respect to the first function to the third function in the source program,
The output determining means includes
Whether the type of each variable related to the first function extracted in the first source program matches the type of each variable related to the first function extracted in the second source program;
Whether the type of each variable related to the second function extracted in the first source program matches the type of each variable related to the second function extracted in the second source program;
It is determined whether the type of each variable related to the third function extracted in the first source program matches the type of each variable related to the third function extracted in the second source program. 5. The output determination device according to claim 4, wherein the second flow is not output when it is determined that they match, and the second flow is output when any of them does not match. In the case of (h), by tracing the source program in reverse order, the statement including the variable identifier representing the variable that does not match in (h) is extracted from the statement extracted from the flow. In the command statement string that first reaches the command statement including the variable identifier, the command statement that sets a value to the variable that does not match is specified, and the variable that constitutes the command statement to be set is specified and specified. First variable means for storing the variable identifier representing the variable in variable information means;
The output determining means determines whether or not the variable identifier representing the variable that does not match in (h) is included in the variable information means, and if included, outputs the second flow and includes The output determination device according to claim 4 or 5, wherein the second flow is not output when the second flow is not detected. In the case of (h), by tracing the source program in reverse order, the instruction sentence including the variable identifier representing the variable that does not match in (h) is extracted from the instruction sentence extracted from the flow. Among them, in a command statement string that first reaches a command statement including the variable identifier, a control command statement that controls whether or not the command statement is executed is specified, and the variable that is included in the control command statement is represented. The variable information means further includes second variable means for extracting the variable identifier and storing the extracted variable identifier in the variable information means. The output determining means includes the variable identifier representing the variable that does not match. The output determination apparatus according to claim 6. In the case of (h), by tracing the source program in reverse order, a setting command statement for setting a value is specified in the variable identifier extracted by the second variable means, and the specified setting command The output determination device according to claim 7, further comprising third variable means for specifying the variable identifier that is a basis for calculating the value in a sentence and storing the specified variable identifier in the variable information means. Information processing device
Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, With respect to the identified first function, a function identifier that can uniquely identify the function is extracted as a first function identifier,
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is Identifying a third function called by the function to be represented, extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function identifier extracted in the first source program And the second function identifier extracted in the second source program, the third function identifier extracted in the first source program, and the second source program extracted in the second source program Whether or not the third function identifier matches, and (a) does not output the second flow extracted by the static analysis means in the second source program when it is determined that both match. , (B) An output determination method for determining to output the second flow when it is determined that any of them does not match. Static analysis means for statically analyzing a source program specifies a first function including the instruction sentence in the source program based on the flow extracted from the source program and the instruction sentence extracted from the flow, A process extraction function for extracting, as the first function identifier, a function identifier that can uniquely identify the function with respect to the identified first function;
In the source program, a second function that calls the function represented by the first function identifier is identified, a second function identifier representing the identified second function is extracted, and in the source program, the first function identifier is A function extraction function for identifying a third function called by the function to be represented and extracting a third function identifier representing the identified third function;
Whether the first function identifier extracted in the first source program matches the first function identifier extracted in the second source program, whether the second function extracted in the first source program Whether the identifier matches the second function identifier extracted in the second source program, and the third function identifier extracted in the first source program, and extracted in the second source program It is determined whether or not the third function identifier matches, and (a) when it is determined that both match, the second flow extracted by the static analysis means in the second source program is not output. , (B) an output determination function for determining that the second flow is output when it is determined that either of them does not match. Output judgment program to be realized

Images