2026-07-25T03:03:40Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:5520 2024-03-06T11:04:57Z ddc:004 open_access

Framework for Static Analysis of PHP Applications (Artifact) Hauzar, David Kofron, Jan Static analysis abstract interpretation dynamic languages PHP security This artifact is based on Weverca, a static analyzer framework for PHP applications. The aim of Weverca is to provide developers with a framework that would allow for an easy implementation of custom static analyses of PHP, while not coping with the dynamic language issues. The framework processes the input source code in two phases. In the first phase, the program-point graph is constructed, which has the dynamic constructs (eval, dynamic includes, type information) already resolved. The developer can then implement a custom static analysis in the second phase, exploiting the output of the first phase. The provided package is designed to support repeatability of the experiments of the companion paper: in particular to perform security (taint) analyses of two bundled applications. Instruction to compile and run the analyzer are also provided. Schloss Dagstuhl – Leibniz-Zentrum für Informatik David Hauzar and Jan Kofron 2015 Is Part Of DARTS, Volume 1, Issue 1, Special Issue of the 29th European Conference on Object-Oriented Programming (ECOOP 2015) Article Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/DARTS.1.1.11 urn:nbn:de:0030-drops-55208 https://drops.dagstuhl.de/entities/document/10.4230/DARTS.1.1.11 eng https://creativecommons.org/licenses/by/3.0/de/legalcode