A Static Detecting Model for Invalid Arithmetic Operation Based on Alias Analysis

Static analysis cannot obtain the values of variables in actual program operation because it does not execute the code itself. It makes the detection of invalid arithmetic operation (IAO) in the field of static analysis difficult to achieve. This paper presents a practical model for IAO detection based on alias analysis. The model uses a triple to record information calculated in dataflow. In the process of dataflow analysis, we consider the alias relation of variables as one of the object of dataflow analysis. Through calculation of the dataflow statement involving alias relation, we can get a more accurate value of the variable. For inter-procedural analysis, we generate a procedure summary to record constraint of IAO. Experimental results show that this method can effectively reduce both false negatives and false positives of IAO, and improve test accuracy.