Patent Document ID: 9336397
Application ID: 14319698
Patent Flag: 1

Claim One:
1. A method for statically analyzing a library comprising: obtaining native method annotations associated with native methods invoked by the library; extracting facts from the library to obtain library facts, wherein the library is written in a first programming language; constructing a type-object lattice; modeling an abstracted heap using the type-object lattice, wherein modeling the abstracted heap comprises expressing the abstracted heap as rules and facts of a declarative logic programming language; expressing abstracted heap update operations as heap update rules; constructing, based on the library, a most general application (MGA) for the library; analyzing the library using the native method annotations, the library facts, the MGA, the abstracted heap, and the heap update rules to obtain results; storing the results of the analysis, wherein the results comprise a source code location in the library at which a security vulnerability exists; and performing an action based on the results, wherein the action comprises generating a report comprising the source code location of the security vulnerability, and wherein the report is accessible by an interested entity.