一句话:针对第三方 C/C++ 开源组件依赖识别中不可区分文件与重复组件的难题,提出精确方法 CNEPS。
随着开源软件复用增加,第三方组件之间形成复杂依赖,对精确依赖分析的需求上升。然而,复用文件中存在难以确定其来源组件的“不可区分文件”,加之重复组件,使得精确识别组件依赖变得困难。本文提出 CNEPS,一种面向第三方 C/C++ 开源组件依赖检查的精确方法,目标是在上述不可区分文件和重复组件存在时仍能准确检查组件间依赖。摘要仅说明问题与动机,未提供具体技术路线、实现细节或实验评估结果。
The rise in open-source software (OSS) reuse has led to intricate dependencies among third-party components, increasing the demand for precise dependency analysis. However, owing to the presence of reused files that are difficult to identify the originating components (i.e., indistinguishable files) and duplicated components, precisely identifying component dependencies is becoming challenging.
@inproceedings{paperbot11372,
title = {CNEPS: A Precise Approach for Examining Dependencies among Third-Party C/C++ Open-Source Components},
author = {Yoonjong Na and Seunghoon Woo and Joomyeong Lee and Heejo Lee},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3639209}
}