Apparatus for and method of implementing feedback directed dependency analysis of software applications

A method executed by a computer processor of detecting one or more data or control dependencies in a software application source code to be analyzed, said method comprising the steps of:

• first performing a first static analysis on said software application source code to identify code sections that require dynamically observed values thereby increasing the scope of discovered dependencies;
• second performing a dynamic analysis on said software application source code using the results of said first static analysis to identify one or more dynamically observed values for code sections in said software application source code identified by said first static analysis;
• third performing a second static analysis utilizing the results of said dynamic analysis to identify one or more dependencies in code sections identified by said first static analysis;
• and
• presenting said one or more identified dependencies to a user.

A computer program product, comprising:

• a non-transitory computer usable medium storing computer usable program code for discovering one or more dependencies in a software application source code to be analyzed, said computer program product including:
• computer usable program code for first performing an initial static analysis on said software application source code to identify one or more code sections of said software application source code which contain dynamic values which cannot be analyzed by said initial static analysis alone;
• computer usable program code for second performing a dynamic analysis on said one or more code sections to identify one or more dynamic values for said one or more code sections identified by said initial static analysis;
• computer usable program code for third performing a subsequent static analysis utilizing said one or more dynamic values identified by said dynamic analysis to identify one or more dependencies in code sections identified by said initial static analysis;
• and
• computer usable program code for presenting said one or more identified dependencies to a user.