(r6) FRCVLabMLSA < Main

Project Description

The Multi-Lingual Static Analysis (MLSA, pronounced Melissa for convenience) is a tool that analyzes software that is written in multiple languages and in which the languages call each other. The objective is to provide open-source tools that help analyze the way multilingual code inter operates to address security issues, software design and refactoring, efficiency and correctness. The first step in the project is to address multilingual call graphs for C/C++, Java, Javascript and Fortran.

The first tool set produced in this project reviews function (procedure) calls within source code. It generates a call graph in csv/graphviz format with formatted information about function calls and their arguments. The tool is currently capable of analyzing programs in C, Python and JavaScript, and in which a C program calls Python code through the python.h interface or a Python program calls JavaScript code through PyV8's eval function. The result in all cases is a call graph that includes procedures in all three languages showing their mutual call relationships. We are building up a database of multilingual code and evaluating the performance of this first version.

Immediate extensions include extending how much of the python.h interface can be handled by the tool. At the moment only the “SimpleFile” interface is handled. The next step is handling mutual C/Python calls, C/JavaScript calls, and JavaScript/Python calls.