TU Darmstadt / ULB / TUbiblio

TypeDevil: dynamic type inconsistency analysis for JavaScript

Pradel, Michael ; Schuh, Parker ; Sen, Koushik (2015)
TypeDevil: dynamic type inconsistency analysis for JavaScript.
Florence, Italy
doi: 10.1109/ICSE.2015.51
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Dynamic languages, such as JavaScript, give programmers the freedom to ignore types, and enable them to write concise code in short time. Despite this freedom, many programs follow implicit type rules, for example, that a function has a particular signature or that a property has a particular type. Violations of such implicit type rules often correlate with problems in the program. This paper presents Type Devil, a mostly dynamic analysis that warns developers about inconsistent types. The key idea is to assign a set of observed types to each variable, property, and function, to merge types based in their structure, and to warn developers about variables, properties, and functions that have inconsistent types. To deal with the pervasiveness of polymorphic behavior in real-world JavaScript programs, we present a set of techniques to remove spurious warnings and to merge related warnings. Applying Type Devil to widely used benchmark suites and real-world web applications reveals 15 problematic type inconsistencies, including correctness problems, performance problems, and dangerous coding practices.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2015
Autor(en): Pradel, Michael ; Schuh, Parker ; Sen, Koushik
Art des Eintrags: Bibliographie
Titel: TypeDevil: dynamic type inconsistency analysis for JavaScript
Sprache: Deutsch
Publikationsjahr: Mai 2015
Verlag: IEEE Press
(Heft-)Nummer: 37
Buchtitel: Proceedings of the 37th International Conference on Software Engineering
Band einer Reihe: 1
Veranstaltungsort: Florence, Italy
DOI: 10.1109/ICSE.2015.51
Kurzbeschreibung (Abstract):

Dynamic languages, such as JavaScript, give programmers the freedom to ignore types, and enable them to write concise code in short time. Despite this freedom, many programs follow implicit type rules, for example, that a function has a particular signature or that a property has a particular type. Violations of such implicit type rules often correlate with problems in the program. This paper presents Type Devil, a mostly dynamic analysis that warns developers about inconsistent types. The key idea is to assign a set of observed types to each variable, property, and function, to merge types based in their structure, and to warn developers about variables, properties, and functions that have inconsistent types. To deal with the pervasiveness of polymorphic behavior in real-world JavaScript programs, we present a set of techniques to remove spurious warnings and to merge related warnings. Applying Type Devil to widely used benchmark suites and real-world web applications reveals 15 problematic type inconsistencies, including correctness problems, performance problems, and dangerous coding practices.

Freie Schlagworte: Instruments, Performance analysis, Runtime, Computer crashes, Arrays, Receivers, Benchmark testing
ID-Nummer: TUD-CS-2015-12085
Fachbereich(e)/-gebiet(e): Profilbereiche > Cybersicherheit (CYSEC)
Profilbereiche
Hinterlegungsdatum: 14 Aug 2017 14:18
Letzte Änderung: 15 Mai 2018 10:33
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen