Abstract:
According to statistics, outofbounds array access is one of the most common and easily missed bugs in aerospace embedded software. At present, program analysis methods for automatically detecting outofbounds array access mostly base on abstract interpretation theory, symbolic execution, model checking and etc. The performances of these methods in false positives, false negatives, and extensibility and so on mainly rely on the characteristics of the software and defects. Therefore, we firstly analyze 94 real world outofbounds array access errors in recent 3 years, which are from aerospace embedded software left to the thirdparty testing part. We carefully examine the bug pattern and manifestation of these bugs, and extract 10 characteristics about the outofbounds array access errors in aerospace embedded software, as well as some important implications. According to these characteristics and implications, we explore the improvement of detection methods for outofbounds array access with respect to interruptdriven programs.