CAJ | 학술논문

利用软件补丁信息,结合静态分析、符号执行和约束求解技术,提出了一种测试输入自动生成方法.该方法可以自动产生绕过补丁修补位置的测试输入,给出新的触发软件缺陷的有效可执行路径,从而找到新的软件缺陷.运用这种方法,在GNU Mailutils中,成功地发现了一个软件缺陷.该方法可以运用于实际的软件代码,保证了软件补丁修补的完备性.
이용연건보정신식,결합정태분석、부호집행화약속구해기술,제출료일충측시수입자동생성방법.해방법가이자동산생요과보정수보위치적측시수입,급출신적촉발연건결함적유효가집행로경,종이조도신적연건결함.운용저충방법,재GNU Mailutils중,성공지발현료일개연건결함.해방법가이운용우실제적연건대마,보증료연건보정수보적완비성.
Utilizing software patch information, combining static analysis, symbolic execution and constraint solving, a new method for automatically generating test inputs was presented. The method can automatically generate test inputs of bypassing patch location, simultaneously find new effective executable paths to trigger bugs, then find new software bugs. A software bug was found in GNU Mailutils by applying this method. The method can analyze actual software codes, and contribute to the maturity of software patchs.