CAJ | 학술논문

传统混合执行测试方法无法对源代码不可见函数进行符号执行。针对该问题，将符号执行、分段式符号执行以及具体执行按需结合，提出一种分段式混合执行测试方法，将源代码不可见函数以分段式分析法截取为单独代码片段，结合动态执行和回归分析方法推导其相应的程序语义。为验证该方法的有效性，实现sCREST原型系统，并对5个应用广泛的开源系统进行测试。实验结果表明，该方法能够产生比传统方法覆盖更多分支数的测试数据。
전통혼합집행측시방법무법대원대마불가견함수진행부호집행。침대해문제，장부호집행、분단식부호집행이급구체집행안수결합，제출일충분단식혼합집행측시방법，장원대마불가견함수이분단식분석법절취위단독대마편단，결합동태집행화회귀분석방법추도기상응적정서어의。위험증해방법적유효성，실현sCREST원형계통，병대5개응용엄범적개원계통진행측시。실험결과표명，해방법능구산생비전통방법복개경다분지수적측시수거。
Function calls with unavailable source codes can not be appropriately handled by symbolic execution in traditional concolic testing. To solve this problem, this paper proposes a segmented concolic testing method, which weaves,by demand, symbolic execution, segmented symbolic execution and concrete execution throughout the testing process. These function calls are treated as separate code segments, dynamically executed and analyzed to derive their corresponding program semantics. To demonstrate the effectiveness of the proposed method, this paper implements sCREST,a segmented concolic testing system based on CREST, and experiments with five open source systems. Experimental results show that segmente concolic testing is able to generate test data that covers more branches than that of the traditional approaches.