{"id":102331,"date":"2021-11-19T21:36:39","date_gmt":"2021-11-19T19:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si"},"modified":"2021-11-19T21:36:39","modified_gmt":"2021-11-19T19:36:40","slug":"vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si","title":{"rendered":"Release of ControlFlag 1.0, a tool for detecting errors in C code","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Intel has released the first significant release of the ControlFlag 1.0 toolkit, which detects errors and anomalies in source code using a machine learning system trained on a vast volume of existing code. Unlike traditional static analyzers, ControlFlag does not rely on predefined rules, which are often unable to account for all possible variations. Instead, it is based on the statistics of the usage of various language constructs in a large number of existing projects. The ControlFlag code is written in C++ and is open-source under the MIT license. <\/p>\n
The system learns by constructing a statistical model of the available code from open-source projects published on GitHub and similar public repositories. During the training phase, the system identifies typical patterns of code constructions and builds a syntax tree of relations between these patterns, reflecting the execution flow in the program. As a result, a reference decision tree is formed, combining the development experience of all analyzed source texts. For the code being checked, a similar process of pattern identification is performed, which is compared with the reference decision tree. Significant discrepancies with neighboring branches indicate anomalies in the checked pattern. <\/p>\n
<\/center> <\/p>\n
As an example of ControlFlag's capabilities, developers analyzed the source texts of the OpenSSL and cURL projects: <\/p>\n
\n
OpenSSL has identified unusual constructs «(s1 == NULL) ∧ (s2 == NULL)» and «(s1 == NULL) | (s2 == NULL)», which do not conform to the commonly used pattern «(s1 == NULL) || (s2 == NULL)». The code also revealed anomalies in expressions «(-2 == rv)» (the minus was a typo) and «BIO_puts(bp, «:») <= 0)» (in the context of checking for successful completion of the function, it should have been «== 0»).\n
cURL detected a missed error by static analyzers when using the structure element «s->keepon», which had a numeric type but was compared to the boolean value TRUE. <\/ul>\n
Key features of ControlFlag version 1.0 include full support for templates in the C language and the ability to detect anomalies in «if» conditional expressions. For example, when analyzing the code fragment «if (x = 7) y = x;», the system will identify that typically in an «if» statement for comparing numerical values, the construct «variable == number» is used, so the presence of «variable = number» in the «if» expression is likely due to a typo. A script is provided to load existing C repositories from GitHub and utilize them for building the model. Ready-made models are also available, allowing immediate code verification. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Release](\"\/wp-content\/uploads\/2021\/11\/487e250bbbd790108aff376f7c9b6c5d.jpg\")
<\/center> <\/p>\n