静态分析告警的自动化修复 conv.docxVIP

?

?2023CarnegieMellonUniversity

AutomatedRepairofStaticAnalysisAlerts

DavidSvoboda

SoftwareSecurityEngineer

AutomatedRepairofStaticAnalysisAlerts?2023CarnegieMellonUniversity

[DISTRIBUTIONSTATEMENTA]Thismaterialhas[DbeISeTnRaIpBpUroTvIOedNfSorTpAuTbEliMcEreNleTaAse]Tahnidsmaterialhasunlimiteddistribution. unlimiteddistribution.

DocumentMarkings

Copyright2023CarnegieMellonUniversity

ThismaterialisbaseduponworkfundedandsupportedbytheDepartmentofDefenseunderContractNo.FA8702-15-D-0002withCarnegieMellonUniversityfortheoperationoftheSoftwareEngineeringInstitute,afederallyfundedresearchanddevelopmentcenter.

Theview,opinions,and/orfindingscontainedinthismaterialarethoseoftheauthor(s)andshouldnotbeconstruedasanofficialGovernmentposition,policy,ordecision,unlessdesignatedbyotherdocumentation.

Referenceshereintoanyspecificcommercialproduct,process,orservicebytradename,trademark,manufacturer,orotherwise,doesnotnecessarilyconstituteorimplyitsendorsement,recommendation,orfavoringbyCarnegieMellonUniversityoritsSoftwareEngineeringInstitute.

NOWARRANTY.THISCARNEGIEMELLONUNIVERSITYANDSOFTWAREENGINEERINGINSTITUTEMATERIALISFURNISHEDONANAS-ISBASIS.CARNEGIEMELLONUNIVERSITYMAKESNOWARRANTIESOFANYKIND,EITHEREXPRESSEDORIMPLIED,ASTOANYMATTERINCLUDING,BUTNOTLIMITEDTO,WARRANTYOFFITNESSFORPURPOSEORMERCHANTABILITY,EXCLUSIVITY,ORRESULTSOBTAINEDFROMUSEOFTHEMATERIAL.CARNEGIEMELLONUNIVERSITYDOESNOTMAKEANYWARRANTYOFANYKINDWITHRESPECTTOFREEDOMFROMPATENT,TRADEMARK,ORCOPYRIGHTINFRINGEMENT.

[DISTRIBUTIONSTATEMENTA]Thismaterialhasbeenapprovedforpublicreleaseandunlimiteddistribution.PleaseseeCopyrightnoticefornon-USGovernmentuseanddistribution.

Thismaterialmaybereproducedinitsentirety,withoutmodification,andfreelydistributedinwrittenorelectronicform