Write a Blog >>
ICSE 2020
Wed 24 June - Thu 16 July 2020
Sat 11 Jul 2020 01:05 - 01:17 at Baekje - P28-Analysis and Verification Chair(s): Rahul Purandare

Static analysis is a proven technique for ensuring software quality automatically catching bugs early during development. However, analysis tooling must approximate, both theoretically and in the interest of practicality. False positives are a pervading manifestation of such approximations–tool configuration and customization is therefore crucial for usability and directing analysis behavior. To suppress false positives, developers readily disable bug checks or insert comments that suppress spurious bug reports. Existing work shows that these mechanisms fall short of developer needs and present a significant pain point for using or adopting analyses. We draw on the insight that an analysis user always has one notable ability to influence analysis behavior regardless of analysis options and implementation: modifying their program. Indeed, developers find that they can effectively suppress false positives by changing their code slightly; this exercise is however manual, ad-hoc, and can introduce awkward or redundant code. We present a new technique for automated, generic, and temporary code changes that tailor to suppress spurious analysis errors. We adopt a rule-based approach where simple, declarative templates describe general syntactic changes for code patterns that are known to be problematic for the analyzer. Our technique promotes program transformation as a general primitive for improving the fidelity of analysis reports (we treat any given analyzer as a black box). Our evaluation is the first systematic study to broadly demonstrate the applicability and benefits of this technique and perspective: we evaluate using five different static analyzers supporting three different languages (C, Java, and PHP) on large, real world programs (>800KLOC). We show that our approach is effective in sidestepping long-standing and complex issues in analysis implementations.

Sat 11 Jul

Displayed time zone: (UTC) Coordinated Universal Time change

01:05 - 02:05
P28-Analysis and VerificationSoftware Engineering in Practice / Technical Papers / Demonstrations at Baekje
Chair(s): Rahul Purandare IIIT-Delhi
01:05
12m
Talk
Tailoring Programs for Static Analysis via Program TransformationTechnicalArtifact Available
Technical Papers
Rijnard van Tonder Sourcegraph, Claire Le Goues Carnegie Mellon University
01:17
3m
Talk
Phoenix: A Tool for Automated Data-Driven Synthesis of Repairs for Static Analysis ViolationsDemo
Demonstrations
Hiroaki Yoshida Fujitsu Laboratories of America, Inc., Rohan Bavishi UC Berkeley, Keisuke Hotta Fujitsu Laboratories Ltd., Yusuke Nemoto Fujitsu Laboratories Ltd., Mukul Prasad Fujitsu Laboratories of America, Shinji Kikuchi Fujitsu Laboratories Ltd.
01:20
12m
Talk
BCFA: Bespoke Control Flow Analysis for CFA at ScaleTechnical
Technical Papers
Ramanathan Ramu Iowa State University, Ganesha Upadhyaya Harmony.one, Hoan Anh Nguyen Amazon, Hridesh Rajan Iowa State University, USA
01:32
12m
Talk
On the Recall of Static Call Graph Construction in PracticeArtifact ReusableTechnicalArtifact Available
Technical Papers
Li Sui Massey University, New Zealand, Jens Dietrich Victoria University of Wellington, Amjed Tahir Massey University, George Fourtounis University of Athens
Pre-print
01:44
12m
Talk
DeCaf: Diagnosing & Triaging Performance Issues in Large-Scale Cloud ServicesSEIP
Software Engineering in Practice
Chetan Bansal Microsoft Research, Sundararajan Renganathan Stanford University, Ashima Asudani Microsoft, Olivier Midy Microsoft, Mathru Janakiraman Amazon
Pre-print
01:56
3m
Talk
mCoq: Mutation Analysis for Coq Verification ProjectsDemo
Demonstrations
Kush Jain The University of Texas at Austin, Karl Palmskog KTH Royal Institute of Technology, Ahmet Celik Facebook, Inc., Emilio JesĂşs Gallego Arias INRIA, Milos Gligoric The University of Texas at Austin