Database-Aware Fault Localization for Dynamic Web Applications

Size: px

Start display at page:

Download "Database-Aware Fault Localization for Dynamic Web Applications"

Dulcie Reynolds
6 years ago
Views:

1 Database-Aware Fault Localization for Dynamic Web Applications Hung Viet Nguyen, Hoan Anh Nguyen, Tung Thanh Nguyen, Tien N. Nguyen Iowa State University ICSM 2013 Sep 22-28, 2013 Eindhoven, The Netherlands

$($row = mysql_fetch_array($result)) { echo $row[ Name ].$

2 Motivation PHP Program $result = mysql_query( SELECT Name FROM Users WHERE Age >= $age ); while ($row = mysql_fetch_array($result)) { echo $row[ Name ]. <br / > ; } SQL query Query result DBMS

3 Motivation ID Name Age Gender Country 1 Alice 20 Female USA 2 Bob 20 Male Canada 3 Carol 25 Female Canada 4 Daniel 30 Male USA L1 L2 L3 L4 function displaysearchresults($age, $gender, $country) $con = mysql_connect( localhost, admin, password ); mysql_select_db( my database, $con); Country = $country $sql = SELECT Name FROM Users WHERE Age >= $age AND Gender = $gender OR Country <> $country ; $result = mysql_query($sql); L5 while ($row = mysql_fetch_array($result)) { L6 echo $row[ Name ]. <br / > ; }} Expected

4 Motivation ID Name Age Gender Country 1 Alice 20 Female USA 2 Bob 20 Male Canada 3 Carol 25 Female Canada 4 Daniel 30 Male USA Actual Query Expected Query Actual Query Expected Query Query ($age=25, $gender= Female, $country= USA ) $sql = SELECT Name FROM Users WHERE Age >= $age AND Gender = $gender OR Country <> $country ; $sql = SELECT Name FROM Users WHERE Age >= $age AND Gender = $gender OR Country = $country ; Output Bob Carol Alice Carol Daniel

5 State-of-the-Art Database-Aware Fault Localization (Clark et al., ASE 11) Using key idea in statistical fault localization (Tarantula): If a statement is executed in more failing tests and fewer passing tests more suspicious Test 1 Test n Sus. L L L L L5 $result = mysql_query($sql); 0.83 L Pass/ Fail Status Pass Fail

6 Limitation of Tarantula Most SQL queries are executed in both passing and failing test cases can t localize errors in SQL queries Test 1 Test n Sus. L L L L L5 $result = mysql_query($sql); 0.53 L Pass/ Fail Status Pass Fail

7 State-of-the-Art Database-Aware Fault Localization (Clark et al., ASE 11) Key ideas: Monitor different templates of a query at run time Rank these templates together with regular statements Query templates function displaysearchresults($age, $gender, $country) Test 1 Test n Sus. L5 $result = mysql_query($sql); 0.53 SELECT Name FROM Products WHERE Price < SELECT Location FROM Companies WHERE Size > Pass/ Fail Status Pass Fail

8 L1 Limitation Query has only 1 template used in function displaysearchresults($age, both Test 1 passing and failing Test n tests Sus. $gender, $country) can t localize error in SQL query $con = mysql_connect( localhost, admin, 0.53 password ); L2 mysql_select_db( my database, $con); 0.53 L3 $sql = SELECT Name FROM Users WHERE Age >= $age AND Gender = $gender OR Country <> $country ; SELECT Name FROM Users WHERE Age >=? AND Gender =? OR Country <>? Only 1 template L4 $result = mysql_query($sql); 0.53 L5 while ($row = mysql_fetch_array($result)) { 0.53 L6 echo $row[ Name ]. <br / > ; }} 0.53 Pass/ Fail Status Pass Fail

SQL queries with unique templates System Checked queries Queries with unique templates AddressBook 34 29 SchoolMate 36 36

9 SQL queries with unique templates System Checked queries Queries with unique templates AddressBook SchoolMate ZenCart Total Most SQL queries have unique templates. Require new database-aware fault localization techniques

10 SQLook Approach 1 Row-based test cases 2 Instrumentation for SQL queries

11 Traditional Test Cases SQL Query ID Name Age Gender Country 1 Alice 20 Female USA 2 Bob 20 Male Canada 3 Carol 25 Female Canada 4 Daniel 30 Male USA Expected Output Alice Carol Daniel

12 1 Row-Based Test Cases Create one test case for each row SQL Query ID Name Age Gender Country 1 Alice 20 Female USA 2 Bob 20 Male Canada 3 Carol 25 Female Canada 4 Daniel 30 Male USA Expected

13 2 Instrumentation for SQL Queries PHP Program PHP Interpreter SQL query $result = mysql_query( SELECT Name FROM Users WHERE ); // Eval mysql_query Send query to DBMS Return result Result DBMS Instrumented code

14 2 Instrumentation for SQL Queries SELECT Name FROM Users WHERE Country <> USA Retrieve entire table Filter rows Filter columns SELECT * FROM Users WHERE Country <> USA SELECT Name 1-Alice, 2-Bob, 3-Carol, 4-Daniel, 2-Bob, 3-Carol, Bob Carol Determine which rows are selected

Example revisited function displaysearchresults($age,

$0 L5 while ($row = mysql_fetch_array($result)) { 0.$

15 Example revisited function displaysearchresults($age, $gender, $country) 1- Alice 2- Bob 3- Carol 4- Daniel Sus. 0.5 Error L4 $result = mysql_query($sql); 0.5 4a WhereExp = True b WhereExp = False 1.0 L5 while ($row = mysql_fetch_array($result)) { 0.5 L6 echo $row[ Name ]. <br / > ; }} 0.25 Pass/ Fail Status Fail Fail Pass Fail Highest suspiciousness score

16 Evaluation Evaluating the accuracy of SQLook Using seeded faults: 1. SQL faults in the WHERE clauses of SQL queries 2. PHP faults that affect the output data retrieved from a database query

17 Results System Ver Files LOC Queries SQL faults PHP faults Mutants % Rank Mutants % Rank AddressBook K % 9 98% SchoolMate K % 15 86% ZenCart , K 2, % 24 90%

18 Database-aware fault localization Using 2 key ideas: 1 Row-based test cases 2 Instrumentation for SQL queries

PHP: Cookies, Sessions, Databases. CS174. Chris Pollett. Sep 24, 2008.

PHP: Cookies, Sessions, Databases. CS174. Chris Pollett. Sep 24, 2008. Outline. How cookies work. Cookies in PHP. Sessions. Databases. Cookies. Sometimes it is useful to remember a client when it comes