GENERATING ADDITIONAL USER INPUTS FOR FAULT DETECTION AND LOCALIZATION IN DYNAMIC SOFTWARE APPLICATIONS

• US 20110016456A1
• Filed: 07/14/2009
• Published: 01/20/2011
• Est. Priority Date: 07/14/2009
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: ARTZI, SHAY, Tip, Frank, Dolby, Julian
• Application Number:
  US12/502,545
• Publication Number:
  US 20110016456A1
• Time in Patent Office: Days
• US Class Current: 717/131
• CPC Class Codes: G06F 11/3684 for test design, e.g. generating new test cases
• CPC Class Codes: G06F 11/3692 for test results analysis

Abstract

The present invention provides a system, computer program product and a computer implemented method for prioritizing code fragments based on the use of a software oracle and on a correlation between the executed code fragments and the output they produce. Also described is a computer-implemented method generates additional user inputs based on execution information associated with path constraints and based on information from the oracle. Advantageously, the embodiment is useful in a test generation tool that generated many similar inputs when a failure-inducing input is found, in order to enhance fault localization. Further, described is a computer-implemented flow for extending the existing idea of concolic testing to applications that interact with persistent state.

Claims

1. A computer-implemented method for analyzing an application comprising a plurality of:

code fragments, and where the application requires user input, the computer-implemented method comprising;

generating an initial input for the application;

executing at least a portion of the code fragments that comprise the application;

associating execution information with the code fragments that have been executed;

determining with an oracle, an evaluation of at least one execution characteristics that these code fragments exhibited on execution;

prioritizing the code fragments in the application based on the evaluation produced by the oracle, and based on the execution information associated with the code fragments that have been executed; and

generating additional inputs for the application based on the code fragments that have been prioritized and based on execution information associated with the code fragments that have been executed.

2. The computer implemented method of claim 1, wherein the execution characteristics of the code fragments that have been executed is an output of the application, and the evaluation produced by the oracle corresponds to errors in at least one part of this output.

3. The computer implemented method of claim 1, wherein the execution characteristics of the code fragments that have been executed is a characteristic of performance of the code fragments that have been executed.

4. The computer implemented method of claim 1, wherein the execution information associated with code fragments that have been executed consists of path constraints.

5. The computer implemented method of claim 1, wherein the execution characteristics of the code fragments that have been executed fragments is a creation of at least one new generated application.

6. The computer implemented method of claim 5, wherein the evaluation produced by the oracle corresponds to errors in the generated application.

7. The computer implemented method of claim 5, wherein the evaluation produced by the oracle corresponds to security vulnerabilities in the generated application.

8. A computer program product for analyzing an application comprising a plurality of code fragments, the computer program product comprising:

a storage medium readable by a computer system, the computer readable medium storing software programming instructions capable of performing with a processor programming code to carry out;

generating an initial input for the application;

executing at least a portion of the code fragments that comprise the application;

associating execution information with the code fragments that have been executed;

determining with an oracle, an evaluation of at least one execution characteristics that these code fragments exhibited on execution;

prioritizing the code fragments in the application based on the evaluation produced by the oracle, and based on the execution information associated with the code fragments that have been executed; and

generating additional inputs for the application based on the code fragments that have been prioritized and based on execution information associated with the code fragments that have been executed.

9. The computer program product of claim 8, wherein the execution characteristics of the code fragments that have been executed is an output of the application, and the evaluation produced by the oracle corresponds to errors in at least one part of this output.

10. The computer program product of claim 8, wherein the execution characteristics of the code fragments that have been executed is a characteristic of performance of the code fragments that have been executed.

11. The computer program product of claim 8, wherein the execution information associated with code fragments that have been executed consists of path constraints.

12. The computer program product of claim 8, wherein the execution characteristics of the code fragments that have been executed fragments is a creation of at least one new generated application.

13. The computer program product of claim 12, wherein the evaluation produced by the oracle corresponds to errors in the generated application.

14. The computer program product of claim 12, wherein the evaluation produced by the oracle corresponds to security vulnerabilities in the generated application.

15. A system for analyzing an application comprising a plurality of code fragments, the system comprising:

a computer processor, a monitor, and an input device;

a suitable storage medium for storing data and accessible by the computer processor; and

an initial input generated for the application;

an execution unit for executing at least a portion of the code fragments that comprise the application and associating execution information with the code fragments that have been executed;

an oracle for determining an evaluation of at least one execution characteristics that these code fragments exhibited on execution and prioritizing the code fragments in the application based on the evaluation produced by the oracle, and based on the execution information associated with the code fragments that have been executed; and

additional inputs generated for the application based on the code fragments that have been prioritized and based on execution information associated with the code fragments that have been executed.

16. The system of claim 15, wherein the execution characteristics of the code fragments that have been executed is an output of the application, and the evaluation produced by the oracle corresponds to errors in at least one part of this output.

17. The system of claim 15, wherein the execution characteristics of the code fragments that have been executed is a characteristic of performance of the code fragments that have been executed.

18. The system of claim 15, wherein the execution information associated with code fragments that have been executed consists of path constraints.

19. The system of claim 15, wherein the execution characteristics of the code fragments that have been executed fragments is a creation of at least one new generated application.

20. The system of claim 19, wherein the evaluation produced by the oracle corresponds to errors in the generated application.