Static Analysis in Go

Summer Internship for Engineer 2019

Transcript

1. Achievement in Merpay Expert Team Masahiro Matsui (@Matts966)
2. Table Of Contents - Motivation - What is static analysis? - analysisutil - refsafe - genelizer - misc
3. Motivation Find problems in programs in the earlier phaze
4. Static Analysis is analysis of computer software that is performed without actually executing programs. @tenntenn さんの『ソースコードを堪能せよ 』より引用
5. analysisutil Does all the path pass through X from start to goal? start goal X
6. examples in reflect
7. refsafe A linter to use reflect package more securely by - Check the order of function calls - and their return value
8. genelizer - Motivation - abstract the static analysis procedures - write linter rules declaratively - A tool to generate linters that check the order of functions & method call - HCL2 syntax
9. genelizer Analyzer Analyzer Analyzer Analyzer Executable binary rule rule rule BuildSSA
10. For what we can use genelizer? - Check complex order of function calls - e.g. in payment services - Linter for errors package (Go 1.13) - Check if resources are used correctly - e.g. files, memory, http.Response.Body… - and other types which implement Closer interface
11. packr's problem - This code works - This code doesn’t
12. misc - Add a validation to consul - Send a patch to go vet (passes/printf) These are not completed or merged. Breaking changes or causing trade-off can lead to ignored PR. So I wrote only an issue in the case of packr and will discuss desirable solution.
13. Thanks Any question?