naa a22 4500 510791107 CHVBK 20180411083320.0 cr unu---uuuuu 180411e20130301xx s 000 0 eng 10.1007/s11334-012-0192-5 doi (NATIONALLICENCE)springer-10.1007/s11334-012-0192-5 Model checking driven static analysis for the real world: designing and tuning large scale bug detection [Elektronische Daten] [Ansgar Fehnker, Ralf Huuck] Model checking and static analysis are traditionally seen as two separate approaches to software analysis and verification. In this work we define a model, checking approach for the static analysis of large C/C++ source code bases to detect potential run-time issues such as program crashes, security vulnerabilities and memory leaks. Working on the intersection of software model checking and automated static bug detection for real-life systems, we address a number of issues: how to scale for real-life systems of 1,000,000 LoC or more, how to quickly write new checks, and most importantly how to distinguish between relevant and irrelevant bugs and fine tune the analysis accordingly. We define our model checking-based static analysis approach implemented in our tool Goanna, illustrate a number of design and implementation decisions to obtain practical outcomes and relevant results, and present our findings by empirical data obtained from regularly analyzing large industrial and open source code bases such as the Firefox Web browser. Springer-Verlag London Limited, 2012 Model checking nationallicence Static analysis nationallicence C/C++ nationallicence Goanna tool nationallicence False positive tuning nationallicence Case study nationallicence Firefox nationallicence Fehnker Ansgar National ICT Australia Ltd. (NICTA), University of New South Wales, Locked Bag 6016, 1466, Sydney, NSW, Australia aut Huuck Ralf National ICT Australia Ltd. (NICTA), University of New South Wales, Locked Bag 6016, 1466, Sydney, NSW, Australia aut Innovations in Systems and Software Engineering Springer-Verlag 9/1(2013-03-01), 45-56 1614-5046 9:1<45 2013 9 11334 https://doi.org/10.1007/s11334-012-0192-5 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11334-012-0192-5 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Fehnker Ansgar National ICT Australia Ltd. (NICTA), University of New South Wales, Locked Bag 6016, 1466, Sydney, NSW, Australia aut NATIONALLICENCE 700 1- Huuck Ralf National ICT Australia Ltd. (NICTA), University of New South Wales, Locked Bag 6016, 1466, Sydney, NSW, Australia aut NATIONALLICENCE 773 0- Innovations in Systems and Software Engineering Springer-Verlag 9/1(2013-03-01), 45-56 1614-5046 9:1<45 2013 9 11334 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer