Detecting the use of unsafe data in software of embedded systems by means of static analysis methodology

The article considers the approach to identifying potentially unsafe data in program code of embedded systems which can lead to errors and fails in the functioning of equipment. The sources of invalid data are revealed and the process of changing the status of this data in process of static code analysis is shown. The mechanism for annotating functions that operate on unsafe data is described, which allows to control the entire process of using them and thus it will improve the quality of the output code.

I. Introduction

Static code analysis is a way of investigating program codes that is performed without their direct execution [1]. One of the main advantages of static analysis is the detection of errors in the early stages of software development, with proper use-even before the source code enters to the version control system. This allows to significantly reducing the cost of developing and supporting software related to bug fixes, the necessity to release patches, and so on [2], [3]. This is especially important for embedded systems for which updating software after commissioning may require significant efforts from developers and lead to financial losses.