CN114817920A - Source code positioning detection method, system, electronic equipment and storage medium - Google Patents

Source code positioning detection method, system, electronic equipment and storage medium Download PDF

Info

Publication number
CN114817920A
CN114817920A CN202210496085.1A CN202210496085A CN114817920A CN 114817920 A CN114817920 A CN 114817920A CN 202210496085 A CN202210496085 A CN 202210496085A CN 114817920 A CN114817920 A CN 114817920A
Authority
CN
China
Prior art keywords
function
code
source code
information
file
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210496085.1A
Other languages
Chinese (zh)
Inventor
苟孟洛
陈灵锋
肖新光
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Antiy Technology Group Co Ltd
Original Assignee
Antiy Technology Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Antiy Technology Group Co Ltd filed Critical Antiy Technology Group Co Ltd
Priority to CN202210496085.1A priority Critical patent/CN114817920A/en
Publication of CN114817920A publication Critical patent/CN114817920A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562—Static detection
    • G06F21/563—Static detection by source code analysis
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/40—Transformation of program code
    • G06F8/41—Compilation
    • G06F8/42—Syntactic analysis
    • G06F8/427—Parsing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/40—Transformation of program code
    • G06F8/41—Compilation
    • G06F8/43—Checking; Contextual analysis
    • G06F8/436—Semantic checking

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Health & Medical Sciences (AREA)
  • Computational Linguistics (AREA)
  • Stored Programmes (AREA)

Abstract

The embodiment of the invention discloses a source code positioning detection method, a source code positioning detection system, electronic equipment and a storage medium, and relates to the technical field of static security detection. The method comprises the following steps: generating a corresponding byte code file based on a source code to be positioned; the bytecode file includes: structure information, metadata, and method information; analyzing the byte code file to obtain an intermediate code corresponding to the byte code file; analyzing the intermediate code to generate a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function; and determining the position information of the source code to be positioned according to the matching query of the function sequence table. The invention can realize the accurate matching and positioning of the source code function, thereby solving the problem of misinformation of the same-name function under different modules and being suitable for the static detection scene of the source code function.

Description

Source code positioning detection method, system, electronic equipment and storage medium
Technical Field
The invention relates to the technical field of static security detection, in particular to a source code positioning detection method, a source code positioning detection system, electronic equipment and a storage medium.
Background
In the process of programming a program source code (source code), due to various reasons, developed codes may have some potential security vulnerabilities, and an attacker can find the vulnerabilities through penetration testing, so that problems of application attack, server intrusion, data downloading, service influence and the like occur. In order to minimize (ideally avoid) security vulnerabilities present in code, code vulnerability detection is typically required after code compilation is complete.
Code vulnerability detection is generally classified into static detection and dynamic detection. In the static detection technical process, a regular fuzzy matching mode is generally used for performing source code function matching so as to position and trace source codes.
However, the inventor of the present application finds in the course of realizing the invention: the regular fuzzy matching method has a large number of false alarms, for example, when searching for a function that is not recommended by an official or a sensitive api (application Program interface), matching errors may occur due to the presence of homonymous functions in source codes under different modules.
Disclosure of Invention
In view of this, embodiments of the present invention provide a method, a system, an electronic device, and a storage medium for source code positioning detection, which can implement accurate matching and positioning of a source code function, thereby solving the problem of misinformation of a homonymous function under different modules.
In order to achieve the purpose of the invention, the following technical scheme is adopted:
in a first aspect, an embodiment of the present invention provides a method for detecting a source code location, where the method includes:
generating a corresponding byte code file based on a source code to be positioned; analyzing the byte code file to obtain an intermediate code corresponding to the byte code file; analyzing the intermediate code to generate a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function; and determining the position information of the source code to be positioned according to the matching query of the function sequence table.
Optionally, the bytecode file includes: byte code file structure information, metadata, and method information;
the analyzing the bytecode file to obtain the intermediate code corresponding to the bytecode file includes: loading the bytecode file based on a code optimization and analysis tool; and converting the byte code file into corresponding intermediate codes according to the byte code file structure information, the metadata and the method information.
Optionally, the parsing the intermediate code, and generating a function sequence table called in the source code to be located includes: traversing and inquiring the homonymous function in the intermediate code; extracting attribute information and calling information of the homonymous function; and aggregating the obtained attribute information and the calling information of the homonymous function to obtain a function sequence list called in the source code to be positioned.
Optionally, the attribute information of the function includes: the name space of the function and/or the position line number of the function; the calling information includes: function call name, call parameters, and/or parameter type of call.
Optionally, the generating a corresponding bytecode file based on the source code to be positioned includes: compiling and analyzing a source code to be positioned; importing the compiling and analyzing result into a symbol table; and performing annotation and semantic analysis on the compiling and analyzing result based on the symbol table to obtain the byte code file.
In a second aspect, an embodiment of the present invention further provides a source code positioning detection system, where the system includes: the system comprises a conversion program unit, an analysis program unit and a matching program unit; the conversion program unit is used for generating a corresponding byte code file based on a source code to be positioned; the analysis program unit is used for analyzing the byte code file to obtain an intermediate code corresponding to the byte code file; the analysis program unit is used for analyzing the intermediate code and generating a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function; and the matching program unit is used for matching and querying according to the function sequence table and determining the position information of the source code to be positioned.
Optionally, the bytecode file includes: byte code file structure information, metadata, and method information; the analyzing the bytecode file to obtain the intermediate code corresponding to the bytecode file includes: loading the bytecode file based on a code optimization and analysis tool; and converting the byte code file into corresponding intermediate codes according to the byte code file structure information, the metadata and the method information.
Optionally, the parser unit includes: the traversing program module is used for traversing and inquiring the homonymous function in the intermediate code; the extraction program module is used for extracting the attribute information and the calling information of the homonymous function; and the aggregation program module is used for aggregating the obtained attribute information and the calling information of the homonymous function to obtain a function sequence list called in the source code to be positioned.
Optionally, the attribute information of the function includes: the name space of the function and/or the position line number of the function; the calling information includes: function call name, call parameters, and/or parameter type of call.
Optionally, the conversion program unit includes: the compiling program module is used for compiling and analyzing the source code to be positioned; the import program module imports the compiling and analyzing result into the symbol table; and the analysis program module is used for performing annotation and semantic analysis on the compiling and analyzing result based on the symbol table to obtain the byte code file.
In a third aspect, an embodiment of the present invention provides an electronic device, including: one or more processors; a memory; the memory stores one or more executable programs, and the one or more processors read the executable program codes stored in the memory and operate the source code positioning detection system corresponding to the executable program codes, so as to execute the source code positioning detection method according to any one of the first aspect.
In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, where one or more programs are stored, and the one or more programs are executable by one or more processors to implement the source code location detection method according to any one of the first aspect.
According to the source code positioning detection method, the system, the electronic device and the storage medium provided by the embodiment of the invention, the source code to be positioned is generated into the corresponding byte code file, then the byte code file is converted into the intermediate language code (namely the intermediate code), the function sequence table called in the source code is obtained through analysis, and according to the attribute of the function, the specific information such as calling and the like contained in the function sequence table, the position information and other information of the target function in the source code can be accurately matched, so that the accurate matching and positioning of the source code function are realized, and the problem of false reporting of the same-name function under different modules in the global matching mode based on the regular expression is solved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
Fig. 1 is a schematic flowchart of a source code positioning detection method according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating a source code positioning detection method according to another embodiment of the present invention;
FIG. 3 is a flow chart of a source code positioning detection method according to another embodiment of the present invention
FIG. 4 is a schematic diagram of a global matching mode source code function positioning detection result based on a regular expression;
fig. 5 is a schematic diagram of a source code function positioning detection process based on a source code positioning detection method according to an embodiment of the present invention.
FIG. 6 is a block diagram of a source code positioning detection system according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of an embodiment of an electronic device of the present invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.
It should be understood that the described embodiments are only some embodiments of the invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The source code positioning detection method provided by the embodiment of the invention is suitable for a source code function static detection scene. The source codes are conveniently and rapidly and accurately positioned, so that whether errors or exceptions exist in the source codes can be further analyzed.
It should be noted that the method can be solidified in a certain manufactured physical product in the form of software, and when a user uses the product, the method flow of the application can be reproduced.
FIG. 1 is a schematic flowchart of a source code positioning detection method according to an embodiment of the present invention; referring to fig. 1, the method for detecting the source code location may include the steps of:
and S110, generating a corresponding byte code file based on the source code to be positioned.
Wherein the bytecode file may include: structure information, metadata, and method information.
The source code may be compiled by a compiler to obtain a corresponding byte code class file, which is generally a class file.
There are generally three specific methods for generating a bytecode file: class, using Class static method Class one ═ requireclass; getClass method Class two ═ requireclass Class instrument. And, a static method using Class.
In some embodiments, said generating a corresponding bytecode file based on the source code to be located comprises: compiling and analyzing a source code to be positioned; importing the compiling and analyzing result into a symbol table; and performing annotation and semantic analysis on the compiling and analyzing result based on the symbol table to obtain the byte code file.
Wherein a symbol table is a data structure used in language translators, such as compilers and interpreters.
In the embodiment, the source code is compiled and analyzed, the result is imported into the z symbol table, and then the byte code file is generated through annotation and semantic analysis, so that subsequent analysis is easy.
And S120, analyzing the byte code file to obtain an intermediate code corresponding to the byte code file.
In this embodiment, the bytecode file includes: byte code file structure information, metadata, and method information;
as shown in fig. 2, the analyzing the bytecode file to obtain the intermediate code corresponding to the bytecode file (step S120) includes: s122, loading the byte code file based on a code optimization and analysis tool; the code optimization and analysis tool may be a root, which is written by java and used for code optimization and analysis, and may analyze the source code and analyze the intermediate file.
In this embodiment, the bytecode can be generated into an intermediate code that is easy to analyze secondarily by using a code optimization and analysis tool, such as a root.
And S124, converting the byte code file into a corresponding intermediate code according to the byte code file structure information, the metadata and the method information.
The intermediate code is also referred to as an intermediate language code.
S130, analyzing the intermediate code to generate a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function;
the attribute information and the calling information of the function can be used for accurately positioning to the source code function information.
S140, according to the function sequence table matching query, determining the position information of the source code to be positioned.
In this embodiment, a matching interface may be provided for quickly integrating the function sequence table obtained in step S130 into static security scanning detection, so as to achieve accurate target matching, and compared with a full information matching scheme, the problem of misinformation of homonymous function positioning under different modules may be solved.
Referring to fig. 3, in some embodiments, the parsing the intermediate code and generating a function sequence table called in the source code to be located (step S130) includes: s132, traversing and inquiring the homonymous function in the intermediate code; s134, extracting attribute information and calling information of the homonymy function; and S136, aggregating the obtained attribute information and the calling information of the homonymous function to obtain a function sequence list called in the source code to be positioned.
In this embodiment, all the homonym functions in the intermediate code are searched in a traversing manner, and the attribute information and the call information of the homonym functions are extracted and aggregated to obtain a called function sequence table, so that the call chain information such as the attributes, the citations, the contexts and the like of all the homonym functions can be tracked, and accurate matching data support is provided for the homonym function tracing under different subsequent modules.
In some embodiments, the attribute information of the function includes: the name space of the function and/or the line number of the position where the function is located, and the like;
the calling information includes: function call names, call parameters and/or parameter types of calls, and/or return value information, etc.
In order to help understand the technical solutions and the technical effects thereof provided by the embodiments of the present invention, the following description is provided with reference to specific examples:
the JAVA official publishes the official obsolete function list in JAVA8, and some developers may cause some network security risks if functions not recommended by the official are introduced during the code writing process. Therefore, after the source code is compiled, testing or analysis is required; the testing of the source code is divided into static testing and dynamic testing.
In the static test of the source code (also called static analysis or static detection), the conventional static detection tool scans in a global matching manner, and if modules with the same function name exist in the source code, all modules are detected together, which results in false alarm. Illustratively, the following source codes:
Figure BDA0003631950080000061
by performing global matching on the obsolete function java.net.urldecoder.decode in the source code, the source code can be matched with the decode function defined in other modules, so as to generate false alarm, and the matching result is shown in fig. 4. The last line of the matching result shows that the custom module function is matched, so that if the homonymy functions defined in the module are too many, a large number of false alarms can be caused, and great difficulty is caused for the repair work at the rear side.
In this embodiment, the bytecode is extracted and translated into the intermediate language code, and then the intermediate language code is analyzed to obtain the function attribute information and the call information, so that not only can the target function be accurately matched, but also the parameter information of the function can be extracted, for example: returning value types, package names, class names, position information and the like, as shown in fig. 5, the accurate matching of the source code function is realized, and the problem of misinformation of the same-name function under different modules is solved.
In summary, the source code positioning detection method provided in the embodiment of the present invention generates a corresponding bytecode file from a source code to be positioned, converts the bytecode file into an intermediate language code, and analyzes the intermediate language code to obtain a function sequence table called in the source code.
Example two
Fig. 6 is a schematic block diagram of an architecture of a source code positioning detection system according to an embodiment of the present invention, and referring to fig. 6, the system includes: a conversion program unit 210, an analysis program unit 220, an analysis program unit 230, and a matching program unit 240; the conversion program unit 210 is configured to generate a corresponding bytecode file based on a source code to be located; the bytecode file includes: structure information, metadata, and method information; the analysis program unit 220 is configured to analyze the bytecode file to obtain an intermediate code corresponding to the bytecode file; the parsing program unit 230 is configured to parse the intermediate code to generate a function sequence table called in the source code to be located; the function sequence list comprises: attribute information and calling information of the function; the matching program unit 240 is configured to match and query according to the function sequence table, and determine the location information of the source code to be located.
The source code positioning analysis system provided in this embodiment may be used to implement the technical solution of the method embodiment shown in fig. 1, and the implementation principle and technical effect thereof are similar to those of the embodiment, and are not described herein again, and may refer to each other.
In the present invention, as an optional embodiment, the bytecode file includes: byte code file structure information, metadata, and method information; the analyzing the bytecode file to obtain the intermediate code corresponding to the bytecode file includes: loading the bytecode file based on a code optimization and analysis tool; and converting the byte code file into corresponding intermediate codes according to the byte code file structure information, the metadata and the method information.
In the present invention, as an optional embodiment, the parser unit 230 includes: the traversing program module is used for traversing and inquiring the homonymous function in the intermediate code; the extraction program module is used for extracting the attribute information and the calling information of the homonymous function; and the aggregation program module is used for aggregating the obtained attribute information and the calling information of the homonymous function to obtain a called function sequence in the source code to be positioned.
In the present invention, as an optional embodiment, the attribute information of the function includes: the name space of the function and/or the position line number of the function; the calling information includes: function call name, call parameters, and/or parameter type of call.
In the present invention, as an alternative embodiment, the conversion program unit 210 includes: the compiling program module is used for compiling and analyzing the source code to be positioned; the import program module imports the compiling and analyzing result into the symbol table; and the analysis program module is used for performing annotation and semantic analysis on the compiling and analyzing result based on the symbol table to obtain the byte code file.
The source code positioning detection system provided by the embodiment of the invention can accurately match the position information and other information of the target function in the source code based on the same specific technical characteristics as the first embodiment, realizes the accurate matching and positioning of the source code function, and solves the problem of false reporting of the same-name function under different modules in the global matching mode based on the regular expression.
EXAMPLE III
A further embodiment of the present invention provides an electronic device, including one or more processors; a memory; the memory stores one or more executable programs, and the one or more processors read the executable program codes stored in the memory to operate the source code positioning detection system provided in the second embodiment corresponding to the executable program codes, so as to execute the source code positioning detection method in any one of the embodiments.
Fig. 7 is a schematic structural diagram of an embodiment of an electronic device according to the present invention, which may implement the method according to any one of the embodiments of the present invention, as shown in fig. 7, as an alternative embodiment, the electronic device may include: the device comprises a shell 41, a processor 42, a memory 43, a circuit board 44 and a power circuit 45, wherein the circuit board 44 is arranged inside a space enclosed by the shell 41, and the processor 42 and the memory 43 are arranged on the circuit board 44; a power supply circuit 45 for supplying power to each circuit or device of the electronic apparatus; the memory 43 is used for storing executable program code; the processor 42 reads the executable program code stored in the memory 43 to operate the source code positioning detection system corresponding to the executable program code, so as to execute the source code positioning detection method described in any one of the foregoing embodiments.
For the specific execution process of the above steps by the processor 42 and the further steps executed by the processor 42 by running the executable program code, reference may be made to the description of the first embodiment of the source code location detection method in the present invention, which is not described herein again.
The electronic device exists in a variety of forms, including but not limited to: (1) a mobile communication device: such devices are characterized by mobile communications capabilities and are primarily targeted at providing voice, data communications. Such terminals include: smart phones (e.g., iPhoie), multimedia phones, functional phones, and low-end phones, among others. (2) Ultra mobile personal computer device: the equipment belongs to the category of personal computers, has calculation and processing functions and generally has the characteristic of mobile internet access. Such terminals include: PDA, MID, and UMPC devices, etc., such as ipads. (3) A portable entertainment device: such devices can display and play multimedia content. This type of device comprises: audio and video playing modules (such as an iPod), handheld game consoles, electronic books, and intelligent toys and portable car navigation devices. (4) A server: the device for providing the computing service comprises a processor, a hard disk, a memory, a system bus and the like, and the server is similar to a general computer architecture, but has higher requirements on processing capacity, stability, reliability, safety, expandability, manageability and the like because high-reliability service needs to be provided. (5) And other electronic equipment with data interaction function.
A further embodiment of the present invention provides a computer-readable storage medium, where one or more programs are stored, and the one or more programs can be executed by one or more processors to implement the source code positioning detection method and the source code positioning detection method described in any one of the foregoing embodiments.
According to the descriptions of the embodiments, the source code positioning detection method and the source code positioning detection system disclosed by the embodiments can accurately extract target function information including position information, module information, function parameter information, return value information and the like from the source code by gradually converting the source code into the intermediate code in the custom format, and perform accurate matching positioning based on the specific information of the target function, so that the problem of false alarm of the detection result based on the fuzzy matching mode in the existing static detection tool can be solved.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may also be a magnetic disk, an optical disk, a Read-only Memory (ROM), a Random Access Memory (RAM), or the like.
The above description is only for the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope of the present invention are included in the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims (10)

1. A method for detecting positioning of a source code, the method comprising the steps of:
generating a corresponding byte code file based on a source code to be positioned;
analyzing the byte code file to obtain an intermediate code corresponding to the byte code file;
analyzing the intermediate code to generate a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function;
and determining the position information of the source code to be positioned according to the matching query of the function sequence table.
2. The method as claimed in claim 1, wherein the bytecode file includes: byte code file structure information, metadata, and method information;
the analyzing the bytecode file to obtain the intermediate code corresponding to the bytecode file includes:
loading the bytecode file based on a code optimization and analysis tool;
and converting the byte code file into corresponding intermediate codes according to the byte code file structure information, the metadata and the method information.
3. The method of claim 1, wherein the parsing the intermediate code to generate the function sequence table called in the source code to be located comprises:
traversing and inquiring the homonymous function in the intermediate code;
extracting attribute information and calling information of the homonymous function;
and aggregating the obtained attribute information and calling information of the homonymous function to obtain a function sequence list called in the source code to be positioned.
4. The method as claimed in claim 1, wherein the attribute information of the function comprises: the name space of the function and/or the position line number of the function;
the calling information includes: function call name, call parameters, and/or parameter type of call.
5. The method of claim 1, wherein the generating a corresponding bytecode file based on the source code to be positioned comprises:
compiling and analyzing a source code to be positioned;
importing the compiling and analyzing result into a symbol table;
and performing annotation and semantic analysis on the compiling and analyzing result based on the symbol table to obtain the byte code file.
6. A source code position detection system, the system comprising: the system comprises a conversion program unit, an analysis program unit and a matching program unit;
the conversion program unit is used for generating a corresponding byte code file based on a source code to be positioned; the bytecode file includes: structure information, metadata, and method information;
the analysis program unit is used for analyzing the byte code file to obtain an intermediate code corresponding to the byte code file;
the analysis program unit is used for analyzing the intermediate code and generating a function sequence list called in the source code to be positioned; the function sequence list comprises: attribute information and calling information of the function;
and the matching program unit is used for matching and querying according to the function sequence table and determining the position information of the source code to be positioned.
7. The source code location detection system of claim 6, wherein the bytecode file includes: byte code file structure information, metadata, and method information;
the analysis program unit includes:
a loader module for loading the bytecode file based on a code optimization and analysis tool;
and the conversion program module is used for converting the byte code file into a corresponding intermediate code according to the byte code file structure information, the metadata and the method information.
8. The system of claim 6, wherein the parser unit comprises:
the traversing program module is used for traversing and inquiring the homonymous function in the intermediate code;
the extraction program module is used for extracting the attribute information and the calling information of the homonymous function;
and the aggregation program module is used for aggregating the obtained attribute information and the calling information of the homonymous function to obtain a function sequence list called in the source code to be positioned.
9. An electronic device, comprising: one or more processors; a memory; the memory stores one or more executable programs, and the one or more processors read the executable program codes stored in the memory and operate the source code positioning detection system corresponding to the executable program codes so as to execute the source code positioning detection method of any one of claims 1 to 5.
10. A computer readable storage medium, characterized in that the computer readable storage medium stores one or more programs which are executable by one or more processors to implement the method of any of the preceding claims 1 to 5.
CN202210496085.1A 2022-05-07 2022-05-07 Source code positioning detection method, system, electronic equipment and storage medium Pending CN114817920A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210496085.1A CN114817920A (en) 2022-05-07 2022-05-07 Source code positioning detection method, system, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210496085.1A CN114817920A (en) 2022-05-07 2022-05-07 Source code positioning detection method, system, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN114817920A true CN114817920A (en) 2022-07-29

Family

ID=82513882

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210496085.1A Pending CN114817920A (en) 2022-05-07 2022-05-07 Source code positioning detection method, system, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN114817920A (en)

Similar Documents

Publication Publication Date Title
US8850581B2 (en) Identification of malware detection signature candidate code
CN108664471B (en) Character recognition error correction method, device, equipment and computer readable storage medium
CN106295346B (en) Application vulnerability detection method and device and computing equipment
CN111488573A (en) Link library detection method and device, electronic equipment and computer readable storage medium
CN114625844B (en) Code searching method, device and equipment
CN115150261B (en) Alarm analysis method, device, electronic equipment and storage medium
US9696973B1 (en) Compilation cache with imports scanner
CN108984223B (en) Program call decoupling method and device, electronic equipment and storage medium
CN114398673A (en) Application compliance detection method and device, storage medium and electronic equipment
KR101461051B1 (en) Method for detecting malignant code through web function analysis, and recording medium thereof
CN106502707B (en) Code generation method and device
US8751508B1 (en) Contextual indexing of applications
CN112256252B (en) Interface generation method and device, storage medium and electronic equipment
CN111488286A (en) Method and device for independently developing Android module
CN114817920A (en) Source code positioning detection method, system, electronic equipment and storage medium
CN116132101A (en) Method and device for verifying threat information misinformation and electronic equipment
CN112671671B (en) Third party flow identification method, device and equipment based on third party library
CN114610364A (en) Application program updating method, application program developing method, application program updating device, application program developing device and computer equipment
CN114357454A (en) Binary executable file dependency library analysis method and device, electronic equipment and storage medium
CN113779576A (en) Identification method and device for executable file infected virus and electronic equipment
CN108875363B (en) Method and device for accelerating virtual execution, electronic equipment and storage medium
CN112162776B (en) Dependency relationship acquisition method and device
CN114527986B (en) C++ language-oriented source code anonymization method and related equipment
CN114780107B (en) Grammar analysis method and device of rule running file and decision engine
WO2017028729A1 (en) Method, apparatus, and electronic device for determining whether an application program is an authorized application program

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination