Industry Practice of JavaScript Dynamic Analysis on WeChat Mini-Programs

Liu，Yi1; Xie，Jinhui2; Yang，Jianbo2; Guo，Shiyu2; Deng，Yuetang2; Li，Shuqing1; Wu，Yechang1; Liu，Yepang1

10.1145/3324884.3421842

2020-09-01

1938-4300

978-1-7281-7281-1

Proceedings - 2020 35th IEEE/ACM International Conference on Automated Software Engineering, ASE 2020

1189-1193

21-25 Sept. 2020

Melbourne, VIC, Australia

JavaScript is one of the most popular programming languages. WeChat Mini-Program is a large ecosystem of JavaScript applications that runs on the WeChat platform. Millions of Mini-Programs are accessed by WeChat users every week. Consequently, the performance and robustness of Mini-Programs are particularly important. Unfortunately, many Mini-Programs suffer from various defects and performance problems. Dynamic analysis is a useful technique to pinpoint application defects. However, due to the dynamic features of the JavaScript language and the complexity of the runtime environment, dynamic analysis techniques were rarely used to improve the quality of JavaScript applications running on industrial platforms such as WeChat Mini-Program previously. In this work, we report our experience of extending Jalangi, a dynamic analysis framework for JavaScript applications developed by academia, and applying the extended version, named WeJalangi, to diagnose defects in WeChat Mini-Programs. WeJalangi is compatible with existing dynamic analysis tools such as DLint, Smemory, and JITProf. We implemented a null pointer checker on WeJalangi and tested the tool's usability on 152 open-source Mini-Programs. We also conducted a case study in Tencent by applying WeJalangi on six popular commercial Mini-Programs. In the case study, WeJalangi accurately located six null pointer issues and three of them haven't been discovered previously. All of the reported defects have been confirmed by developers and testers.

JavaScript Program Analysis

第一 ; 通讯

英语

EI ; CPCI-S

WOS:000651313500105

20210309773280

Defects ; High level languages ; Open source software ; Quality control

Computer Software, Data Handling and Applications:723 ; Computer Programming Languages:723.1.1 ; Quality Assurance and Control:913.3 ; Materials Science:951

2-s2.0-85099173960

Scopus

1.Southern University of Science and Technology,Department of Computer Science and Engineering,Shenzhen,China
2.Tencent Inc.,China

Liu，Yi,Xie，Jinhui,Yang，Jianbo,et al. Industry Practice of JavaScript Dynamic Analysis on WeChat Mini-Programs[C],2020:1189-1193.