java外文文献.pdfVIP

Computer Communications 23 (2000) 1594–1605 /locate/comcom On object initialization in the Java bytecode * S. Doyon , M. Debbabi LSFM Research Group, Department of Computer Science, Laval University, Sainte Foy, Que., Canada G1K 7P4 Abstract Java is an ideal platform for implementing mobile code systems, not only because of its portability but also because it is designed with security in mind. Untrusted Java programs can be statically analyzed and validated. The program’s behavior is then monitored to prevent potentially malicious operations. Static analysis of untrusted classes is carried out by a component of the Java virtual machine called the verifier. The most complex part of the verification process is the dataflow analysis, which is performed on each method in order to ensure type-safety. This paper clarifies in detail one of the tricky aspects of the dataflow analysis: the verification of object initialization. We present and explain the rules that need to be enforced and we then show how verifier implementations can enforce them. Rules for object creation require, among other things, that uninitialized objects never be used before they are initialized. Constructors must properly initialize their this argument before they are allowed to return. This paper also deals with initialization failures (indicated by exceptions): the object being initialized must be discarded, and constructors must propagate initialization failures. 2000 Elsevier Science B.V. All rights reserved. Keywords : Java bytecode; Object initialization; Dataflow analysis; static analysis; java s