{"id":102331,"date":"2021-11-19T21:36:39","date_gmt":"2021-11-19T19:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si"},"modified":"2021-11-19T21:36:39","modified_gmt":"2021-11-19T19:36:40","slug":"vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-controlflag-1-0-instrumenta-dlya-vyyavleniya-oshibok-v-kode-na-yazyke-si","title":{"rendered":"L\u00ebshimi i ControlFlag 1.0, nj\u00eb mjet p\u00ebr identifikimin e gabimeve n\u00eb kodin n\u00eb gjuh\u00ebn C","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Intel publikoi versionin e saj t\u00eb par\u00eb t\u00eb r\u00ebnd\u00ebsish\u00ebm t\u00eb mjetit ControlFlag 1.0, i cili lejon identifikimin e gabimeve dhe anomalive n\u00eb tekstet burimore, duke p\u00ebrdorur nj\u00eb sistem t\u00eb m\u00ebsimit t\u00eb makinerive t\u00eb trajnuar mbi nj\u00eb sasi t\u00eb madhe kodi ekzistues. Ndryshe nga analizator\u00ebt tradicional\u00eb statik\u00eb, ControlFlag nuk p\u00ebrdor rregulla t\u00eb gatshme, t\u00eb cilat \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb parashikosh t\u00eb gjitha variantet, dhe mb\u00ebshtetet n\u00eb statistikat e p\u00ebrdorimit t\u00eb t\u00eb gjitha strukturave gjuh\u00ebsore n\u00eb nj\u00eb num\u00ebr t\u00eb madh projektesh ekzistuese. Kodi i ControlFlag \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C++ dhe \u00ebsht\u00eb i hapur n\u00ebn licens\u00ebn MIT. <\/p>\n
Sistemi m\u00ebson duke nd\u00ebrtuar nj\u00eb model statistik t\u00eb grupit ekzistues t\u00eb kodit t\u00eb projekteve t\u00eb hapura, t\u00eb publikuara n\u00eb GitHub dhe repo t\u00eb tjera publike t\u00eb ngjashme. Gjat\u00eb faz\u00ebs s\u00eb m\u00ebsimit, sistemi p\u00ebrcakton modelet tipike t\u00eb nd\u00ebrtimit t\u00eb strukturave n\u00eb kod dhe ndan nj\u00eb pem\u00eb sintaksore lidhjesh midis k\u00ebtyre modeleve, e cila reflekton rrjedh\u00ebn e ekzekutimit t\u00eb kodit n\u00eb program. N\u00eb fund krijohet nj\u00eb pem\u00eb referimi p\u00ebr marrjen e vendimeve, e cila bashkon eksperienc\u00ebn e zhvillimit t\u00eb t\u00eb gjith\u00eb teksteve burimore t\u00eb analizuara. P\u00ebr kodin e kontrolluar, nj\u00eb proces i ngjash\u00ebm i identifikimit t\u00eb modeleve kryhet, t\u00eb cilat krahasohen me pem\u00ebn referuese p\u00ebr marrjen e vendimeve. Shk\u00ebputjet e m\u00ebdha nga deg\u00ebt fqinj\u00eb tregojn\u00eb p\u00ebr ekzistenc\u00ebn e nj\u00eb anomalii n\u00eb modelin e kontrolluar. <\/p>\n
<\/center> <\/p>\n
Si nj\u00eb shembuj t\u00eb mund\u00ebsive t\u00eb ControlFlag, zhvilluesit mor\u00ebn p\u00ebrsip\u00ebr t\u00eb analizojn\u00eb tekstet burimore t\u00eb projekteve OpenSSL dhe cURL: <\/p>\n
\n
N\u00eb OpenSSL u identifikuan struktura anomalice \u201e(s1 == NULL) \u2227 (s2 == NULL)\u201c dhe \u201e(s1 == NULL) | (s2 == NULL)\u201c, q\u00eb nuk p\u00ebrputhen me modelin e zakonsh\u00ebm \u201e(s1 == NULL) || (s2 == NULL)\u201c. N\u00eb kod u identifikuan gjithashtu anomali n\u00eb shprehjet \u201e(-2 == rv)\u201c (minus ishte nj\u00eb gabim shkrimi) dhe \u201eBIO_puts(bp, ':') <= 0\u201c (n\u00eb kontekstin e verifikimit t\u00eb p\u00ebrfundimit t\u00eb suksessh\u00ebm t\u00eb funksionit duhej t\u00eb ishte \u201e== 0\u201c).\n
N\u00eb cURL u zbuluar nj\u00eb gabim i paidentifikuar nga analizator\u00ebt statik\u00eb gjat\u00eb p\u00ebrdorimit t\u00eb elementit t\u00eb struktur\u00ebs \u201es->keepon\u201c, i cili kishte tip numerik, por u krahasua me vler\u00ebn booleane TRUE. <\/ul>\n
Nga ve\u00e7orit\u00eb e versionit ControlFlag 1.0 p\u00ebrmendet mb\u00ebshtetje e plot\u00eb p\u00ebr modelin e tipit p\u00ebr gjuh\u00ebn C dhe mund\u00ebsia p\u00ebr t\u00eb zbuluar anomali n\u00eb shprehjet kushtore \u201eif\u201c. P\u00ebr shembull, gjat\u00eb analiz\u00ebs s\u00eb fragmentit t\u00eb kodit \u201eif (x = 7) y = x;\u201c, sistemi do t\u00eb identifikoj\u00eb q\u00eb zakonisht n\u00eb operatorin \u201eif\u201c p\u00ebr krahasimin e vlerave numerike p\u00ebrdoret konstrukti \u201evariabla == numri\u201c, prandaj \u00ebsht\u00eb me shum\u00eb gjasa q\u00eb specifikimi \u201evariabla = numri\u201c n\u00eb shprehjen \u201eif\u201c \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim shkrimi. N\u00eb paket\u00eb ofrohet nj\u00eb skenar q\u00eb lejon ngarkimin e projekteve ekzistuese nga depoja n\u00eb GitHub n\u00eb gjuh\u00ebn C dhe p\u00ebrdorimin e tyre p\u00ebr nd\u00ebrtimin e modelit. Gjithashtu jan\u00eb t\u00eb disponueshme modele t\u00eb gatshme, t\u00eb cilat lejojn\u00eb t\u00eb filloni menj\u00ebher\u00eb verifikimin e kodit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"L\u00ebshimi](\"\/wp-content\/uploads\/2021\/11\/487e250bbbd790108aff376f7c9b6c5d.jpg\")
<\/center> <\/p>\n