Practical API Protocol Checking with Access Permissions

Reusable APIs often dene usage protocols. We previously developed a sound modular type system that checks compliance with typestate-based protocols while aording a great deal of aliasing exibility. We also developed Plural, a prototype tool that embodies our approach as an automated static analysis and includes several extensions we found useful in practice. This paper evaluates our approach along the following dimensions: (1) We report on experience in specifying relevant usage rules for a large Java standard API with our approach. We also specify several other Java APIs and identify recurring patterns. (2) We summarize two case studies in verifying third-party open-source code bases with few false positives using our tool. We discuss how tool shortcomings can be addressed either with code refactorings or extensions to the tool itself. These results indicate that our approach can be used to specify and enforce real API protocols in practice.

• Type: Conference
• Year: 2009
• Where: ECOOP
• Authors: Kevin Bierhoff, Nels E. Beckman, Jonathan Aldrich
• Keywords: ECOOP 2009, Java Standard Api, Programming Languages, Real Api Protocols, Usage Protocols