BegBunch

Cifuentes, Cristina; Hoermann, Christian; Keynes, Nathan; Li, Lian; Long, Simon; Mealy, Erica; Mounteney, Michael; Scholz, Bernhard

doi:10.1145/1555860.1555866

Cited by 40 publications

(1 citation statement)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several papers survey the detection of uninitialized value misuses in runtime analyzers [14,20,6]. A common characteristic of said tools is to inspect the program during execution, with a given input.…”

Section: Runtime Analysis Toolsmentioning

confidence: 99%

Detecting Uninitialized Variables in C++ with the Clang Static Analyzer

Umann

Porkoláb

2020

Acta Cybern

View full text Add to dashboard Cite

Uninitialized variables have been a source of errors since the beginning of software engineering. Some programming languages (e.g. Java and Python) will automatically zero-initialize such variables, but others, like C and C++, leave their state undefined. While laying aside initialization in C and C++ might be a performance advantage if an initial value can't be supplied, working with such variables is an undefined behavior, and is a common source of instabilities and crashes. To avoid such errors, whenever meaningful initialization is possible, it should be used. Tools for detecting these errors run time have existed for decades, but those require the problematic code to be executed. Since in many cases the number of possible execution paths are combinatoric, static analysis techniques emerged as an alternative. In this paper, we overview the technique for detecting uninitialized C++ variables using the Clang Static Analyzer, and describe various heuristics to guess whether a specific variable was left in an undefined state intentionally. We implemented a prototype tool based on our idea and successfully tested it on large open source projects.

show abstract

Section: Runtime Analysis Toolsmentioning

confidence: 99%