Framework for Static Analysis of PHP Applications

Hauzar, David; Kofroň, Jan

doi:10.4230/lipics.ecoop.2015.689

Cited by 5 publications

(1 citation statement)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With PHP being a rather dynamic language, there is a spectrum of tools for it using dynamic analysis [16], [18], static analysis or a combination thereof. Since we prefer to stay with static analysis as far as possible, the most related existing solutions for us are PhpStorm [9], PHP AiR [7], [8] and the unnamed framework by Hauzar and Kofron [6]. Most PHP code analysis tools have a strong focus on standard enforcing (e.g., smell detection) and security (including instrumentation).…”

Section: Related Workmentioning

confidence: 99%

Deriving Modernity Signatures for PHP Systems with Static Analysis

Brink

Gerhold

Zaytsev

2022

2022 IEEE 22nd International Working Conference on Source Code Analysis and Manipulation (SCAM)

View full text Add to dashboard Cite

The PHP language has undergone many changes in its syntax and grammar, with respect to both features the language has to offer as well as the distribution of language features used by programmers in their projects. We present a novel method of using grammar usage statistics to calculate a modernity signature for a PHP system, so that we can determine its age. The system will aid developers in choosing whether or not to execute or use a PHP system, without having to perform an extensive inspection.

show abstract

Section: Related Workmentioning

confidence: 99%

Deriving Modernity Signatures for PHP Systems with Static Analysis

Brink

Gerhold

Zaytsev

2022

2022 IEEE 22nd International Working Conference on Source Code Analysis and Manipulation (SCAM)

View full text Add to dashboard Cite

show abstract

An Abstract Domain for Objects in Dynamic Programming Languages

Arceri

Pasqua

Mastroeni

2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

P/Taint: unified points-to and taint analysis

Grech

Smaragdakis

2017

Proc. ACM Program. Lang.

View full text Add to dashboard Cite

Static information-flow analysis (especially taint-analysis) is a key technique in software security, computing where sensitive or untrusted data can propagate in a program. Points-to analysis is a fundamental static program analysis, computing what abstract objects a program expression may point to. In this work, we propose a deep unification of information-flow and points-to analysis. We observe that information-flow analysis is not a mere high-level client of points-to information, but it is indeed identical to points-to analysis on artificial abstract objects that represent different information sources. The very same algorithm can compute, simultaneously, two interlinked but separate results (points-to and information-flow values) with changes only to its initial conditions. The benefits of such a unification are manifold. We can use existing points-to analysis implementations, with virtually no modification (only minor additions of extra logic for sanitization) to compute information flow concepts, such as value tainting. The algorithmic enhancements of points-to analysis (e.g., different flavors of context sensitivity) can be applied transparently to information-flow analysis. Heavy engineering work on points-to analysis (e.g., handling of the reflection API for Java) applies to information-flow analysis without extra effort. We demonstrate the benefits in a realistic implementation that leverages the Doop points-to analysis framework (including its context-sensitivity and reflection analysis features) to provide an information-flow analysis with excellent precision (over 91%) and recall (over 99%) for standard Java information-flow benchmarks. The analysis comfortably scales to large, real-world Android applications, analyzing the Facebook Messenger app with more than 55K classes in under 7 hours. CCS Concepts: • Software and its engineering → General programming languages;

show abstract

Framework for Static Analysis of PHP Applications

Cited by 5 publications

References 19 publications

Deriving Modernity Signatures for PHP Systems with Static Analysis

Deriving Modernity Signatures for PHP Systems with Static Analysis

An Abstract Domain for Objects in Dynamic Programming Languages

P/Taint: unified points-to and taint analysis

Contact Info

Product

Resources

About