ILEA: Inter-language analysis across java and c

Java bug finders perform static analysis to find implementation that can lead to exploits and failures; Java compilers static analysis for optimization. If Java programs foreign function calls to C libraries, however, analysis is forced to make either optimistic or pessimistic about the foreign function calls, since of the C libraries are typically not available. propose ILEA (stands for Inter-LanguagE Analysis), is a framework that enables existing Java analyses to the behavior of C code. Our framework includes: (1) a novel specification language, which extends the Java Machine Language (JVML) with a few primitives approximate the effects that the C code might have; (2) automatic specification extractor, which builds models of C code. Comparing to other possible specification languages, language is expressive, yet facilitates construction automatic specification extractors. Furthermore, because specification language is based on the JVML, existing analyses can be easily migrated to utilize specifications the language. We also demonstrate the utility of specifications generated, by modifying an existing nonnull to identify null-related bugs in Java applications contain C libraries. Our preliminary experiments identified dozens of null-related bugs. Copyrightc 2007.