A type system for format strings

Weitz, Konstantin; Kim, Gene; Srisakaokul, Siwakorn; Ernst, M.

doi:10.1145/2610384.2610417

Cited by 10 publications

(12 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Qualifier systems have been developed in these frameworks for checking software properties such as null safety [8], [33], tainting [8], [33], format strings [35], [44], internationalization [33], regular expressions [36], UI threading [17], ownership [20], and immutability [21], [33], [40], [46].…”

Section: Type Qualifiersmentioning

confidence: 99%

See 1 more Smart Citation

Cascade: A Universal Programmer-Assisted Type Qualifier Inference Tool

Vakilian¹,

Phaosawasdi²,

Ernst³

et al. 2015

2015 IEEE/ACM 37th IEEE International Conference on Software Engineering

Self Cite

View full text Add to dashboard Cite

Abstract-Type qualifier inference tools usually operate in batch mode and assume that the program must not be changed except to add the type qualifiers. In practice, programs must be changed to make them type-correct, and programmers must understand them. CASCADE is an interactive type qualifier inference tool that is easy to implement and universal (i.e., it can work for any type qualifier system for which a checker is implemented). It shows that qualifier inference can achieve better results by involving programmers rather than relying solely on automation.

show abstract

Section: Type Qualifiersmentioning

confidence: 99%

“…Researchers have developed many qualifier systems to check software properties such as concurrency [17], ownership [20], [39], immutability [21], [40], safety against null dereferences [8], [33], and security [8], [16], [33], [35], [44]. Java 8 supports the syntactic features required by qualifier systems [2].…”

Section: Introductionmentioning

confidence: 99%

Cascade: A Universal Programmer-Assisted Type Qualifier Inference Tool

Vakilian¹,

Phaosawasdi²,

Ernst³

et al. 2015

2015 IEEE/ACM 37th IEEE International Conference on Software Engineering

Self Cite

View full text Add to dashboard Cite

show abstract

“…This paper presents the Format String Checker that is based on the format string type system presented in [3]. The Format String Checker guarantees that calls to Java's Formatter API will not throw exceptions.…”

Section: Introductionmentioning

confidence: 99%

“…In a previous paper [3], we presented the format string type system that promises to detect and prevent the incorrect use of format methods. The paper evaluates an implementation of the type system (Section 7), and compares it to the related work (Section 8).…”

Section: Introductionmentioning

confidence: 99%

“…

ABSTRACTJava supports format strings, but their use is error prone because: Java's type system does not find any but the most trivial mistakes, Java's format methods fail silently, and format methods are often executed infrequently.This paper presents the Format String Checker that is based on the format string type system presented in [3]. The Format String Checker guarantees that calls to Java's Formatter API will not throw exceptions.

We evaluate the Format String Checker on 6 large and well-maintained open-source projects.

…”

mentioning

confidence: 99%

See 1 more Smart Citation

A format string checker for Java

Weitz

Srisakaokul

Kim

et al. 2014

Proceedings of the 2014 International Symposium on Software Testing and Analysis

Self Cite

View full text Add to dashboard Cite

Java supports format strings, but their use is error prone because: Java's type system does not find any but the most trivial mistakes, Java's format methods fail silently, and format methods are often executed infrequently.This paper presents the Format String Checker that is based on the format string type system presented in [3]. The Format String Checker guarantees that calls to Java's Formatter API will not throw exceptions.We evaluate the Format String Checker on 6 large and well-maintained open-source projects. Format string bugs are common in practice (we found 104 bugs), and the annotation burden on the user of our type system is low (on average, for every bug found, only 1.0 annotations need to be written).

show abstract

Typing Requirement Model as Coroutines

Gu,

2024

IEEE Access

View full text Add to dashboard Cite

Model-Driven Engineering (MDE) is a technique that aims to boost productivity in software development and ensure the safety of critical systems. Central to MDE is the refinement of high-level requirement models into executable code. Given that requirement models form the foundation of the entire development process, ensuring their correctness is crucial. RM2PT is a widely used MDE platform that employs the REModel language for requirement modeling. REModel contains contract sections and other sections including a UML sequence diagram. This paper contributes a coroutine-based type system that represents pre-and post-conditions in the contract sections in a requirement model as the receiving and yielding parts of coroutines, respectively. The type system is capable of composing coroutine types, so that users can view functions as a whole system and check their collective behavior. By doing so, our type system ensures that the contracts defined in it are executed as outlined in the accompanied sequence diagram. We assessed our approach using four case studies provided by RM2PT, validating the accuracy of the models.INDEX TERMS coroutine, model-driven engineering, static analysis, type system.

show abstract

A type system for format strings

Cited by 10 publications

References 16 publications

Cascade: A Universal Programmer-Assisted Type Qualifier Inference Tool

Cascade: A Universal Programmer-Assisted Type Qualifier Inference Tool

A format string checker for Java

Typing Requirement Model as Coroutines

Contact Info

Product

Resources

About