SPY-Lab / mufasa

μJS Finite-state Automata String Analyzer

μFASA static analyzer

μFASA (μJS Finite-state Automata String Analyzer) is a string static analyzer based on abstract interpretation for inter-procedural version of μJS, a sub-language of JavaScript. Full details about μFASA can be found in Static Program Analysis for String Manipulation Languages presented in the 7th International Workshop on Verification and Program Transformation (VPT 2019).The μJS syntax is reported in figure above.

How to run the tool

git clone https://github.com/SPY-Lab/mufasa

Here you can find the JAR file mufasa.jar and you can run the MuJS static analyzer as

java -jar mufasa.jar filename.js 

Some option are available:

• -widening n: set the parametric widening to n;
• -coalesced: choose the coalesced sum abstract domain for the analysis. By default, this domain is used during the analysis;
• -lifted: choose the lifted union abstract domain for the analysis;
• -invariants: prints the invariants for each statement program point. By default, it prints only the memory holding at the end of the abstract execution;
• -help: print the menu.

Example

Consider the following μJS program.

str = "helloworld";
a = 0;

while (a < 100) {
	a = a + 1;
}

if (a == 5) {
	c = (str.charAt(0));
} else {
	c = (str.charAt(3));
}

The state resulting from java -jar -coalesced mufasa.jar file.js is

*******************
str -> helloworld
a -> [0, +Inf]
c -> (l + h)
*******************

Contributors

• Vincenzo Arceri [e-mail]
• Isabella Mastroeni [e-mail]
• Sunyi Xu [e-mail]