In source code suppression of binary analysis

• US 20070226690A1
• Filed: 02/08/2006
• Published: 09/27/2007
• Est. Priority Date: 02/08/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: van Gogh, Jeffrey, Guerrera, Nicholas, Fanning, Michael, Sandys, Sean
• Granted Patent: US 7,873,949 B2
• Time in Patent Office: Days
• US Class Current: 717/124
• CPC Class Codes: G06F 11/3604 Software analysis for verifying properties of programs byte-code verification G06F9/44589
• CPC Class Codes: G06F 11/3624 by performing operations on the source code, e.g. via a compiler

Abstract

Upon accessing binary that was generated by a compiler using corresponding source code, a potential reportable problem in the binary is identified. The binary includes a compiler transformed indication that the potential reportable problem is to be suppressed at least under some circumstances. The transformed indication is generated by the compiler using a corresponding untransformed indication in the corresponding source code. The transformed indication is then used to decide that the potential reportable problem should not be reported. Thus, artifacts within the source code itself may ultimately direct what problems are not to be reported on when the corresponding binary is analyzed after the compile phase.

Claims

1. A method for analyzing binary generated by a compiler and selectively reporting regarding a potential problem with the analyzed binary depending on whether or not the analyzed binary contains an indication that the potential problem should be suppressed, the method comprising the following:

an act of accessing first binary from a compiler that generated the first binary and second binary using corresponding source code;

an act of identifying a potential reportable problem in the first binary;

an act of determining that the second binary contains a compiler-transformed indication that the potential reportable problem is to be suppressed, wherein the transformed indication is generated by the compiler using an untransformed indication in the corresponding source code; and

an act of using the transformed indication to decide that the potential reportable problem should not be reported.

2. A method in accordance with claim 1, wherein the potential reportable problem is a first potential reportable problem, the method further comprising:

an act of identifying a second potential reportable problem in the binary;

an act of determining that the binary does not contain a compiler-transformed indication that the second potential reportable problem is to be suppressed; and

an act of reporting the second potential reportable problem.

3. A method in accordance with claim 1, wherein the second binary is included within the first binary in the same file as the first binary.

4. A method in accordance with claim 1, wherein the second binary and the first binary are in separate files.

5. A method in accordance with claim 1, wherein the transformed indication also includes a representation of a justification for ignoring the potential reportable problem.

6. A method in accordance with claim 1, wherein the transformed indication includes a representation of a checking rule to which the potential reportable problem relates.

7. A method for analyzing binary generated by a compiler and selectively reporting regarding a potential problem with the analyzed binary depending on whether or not the analyzed binary contains an indication that the potential problem should be suppressed, the method comprising the following:

an act of accessing first binary from a compiler that generated the first binary and second binary using corresponding source code;

an act of identifying a potential reportable problem in the first binary;

an act of determining that the second binary contains a compiler-transformed indication that the potential reportable problem is to be suppressed at least under some circumstances, wherein the transformed indication is generated by the compiler using an untransformed indication in the corresponding source code; and

an act of using the transformed indication to decide that the potential reportable problem should not be reported in a differential manner than it would be reported if the second binary had not contained the transformed indication.

8. A method in accordance with claim 7, wherein the second binary is included within the first binary in the same file as the first binary.

9. A method in accordance with claim 7, wherein the second binary and the first binary are in separate files.

10. A method in accordance with claim 7, further comprising:

an act of reporting the potential reportable problem in the different manner.

11. A method in accordance with claim 10, wherein the transformed indication also includes a representation of a justification for ignoring the potential reportable problem, wherein the act of reporting the potential reportable problem comprises an act of reporting the justification.

12. A method in accordance with claim 11, wherein the transformed indication includes a representation of a checking rule to which the potential reportable problem relates, wherein the act of reporting the potential reportable problem further comprises an act of reporting the checking rule.

13. A method in accordance with claim 10, wherein the transformed indication includes a representation of a checking rule to, which the potential reportable problem relates, wherein the act of reporting the potential reportable problem comprises an act of reporting the checking rule.

14. A method in accordance with claim 7, wherein the transformed indication also includes a representation of a justification for ignoring the potential reportable problem.

15. A method in accordance with claim 14, wherein the transformed indication includes a representation of a checking rule to which the potential reportable problem relates.

16. A method in accordance with claim 7, wherein the transformed indication includes a representation of a checking rule to which the potential reportable problem relates.

17. A computer program product comprising one or more computer-readable media having thereon computer-executable instructions that, when executed by one or more for perform a method for analyzing binary generated by a compiler and selectively reporting regarding a potential problem with the analyzed binary depending on whether or not the analyzed binary contains an indication that the potential problem should be suppressed, the computer-executable instructions comprising the following:

at least one computer-executable instruction for identifying a potential reportable problem in binary accessed from a compiler that generated the binary using corresponding source code;

at least one computer-executable instruction for determining whether or not the binary contains a compiler-transformed indication that the potential reportable problem is to be suppressed at least under some circumstances, wherein the transformed indication is generated by the compiler using an untransformed indication in the corresponding source code;

at least one computer-executable instruction representing a first execution path for reporting the potential reportable problem if it is determined that the binary does not contain the compiler-transformed indication; and

at least one computer-executable instruction representing a second execution path that is executed if it is determined that the binary does contain the compiler-transformed indication, wherein the second execution path either does not include any instructions for reporting the potential reportable problem or includes instructions for reporting the potential reportable problem in a different manner than would be the case in the first execution path.

18. The computer program product in accordance with claim 17, wherein the one or more computer-readable media is physical storage media.

19. The computer program product in accordance with claim 17, wherein the one or more computer-readable media is system memory.

20. A computing system containing the computer program product of claim 17.