Static Analysis for Javascript

Total Page:16

File Type:pdf, Size:1020Kb

Static Analysis for Javascript University of Aarhus Department of Computer Science Ph.D Dissertation Static Analysis for JavaScript Simon Holm Jensen Supervisor: Anders Møller Submitted: January 28, 2013 Abstract Web applications present unique challenges to designers of static analysis tools. One of these challenges is the language JavaScript used for client side scripting in the browser. JavaScript is a complex language with many pitfalls and poor tool support compared to other languages. This dissertation describes the design and implementation of a static analysis for JavaScript that can assist programmers in finding bugs in code during development. We describe the design of a static analysis tool for JavaScript, built using the monotone framework. This analysis infers detailed type information about programs. This information can be used to detect bugs such as null pointer dereferences and unintended type coercions. The analysis is sound, enabling it to prove the absence of certain program errors. JavaScript is usually run within the context of the browser and the DOM API. The major challenges in supporting this environment is to model the event loop of the browser and Document Object Model used to interface and modify the HTML displayed in the browser. We address both of these challenges in the design of our analysis. Dynamic code evaluation is widely used in JavaScript applications. To accommodate this in the analysis, we add the Unevalizer component which can transform code on the fly to eliminate dynamic code evaluation. By studying the use of dynamic code evaluation in the wild, we have identified several common patterns. Many of these patterns can automatically be transformed into equivalent code without dynamic code evaluation and can then be analyzed further. Acceptable performance is needed to make an analysis tool useful in prac- tice. To that end we have designed an extension to the analysis called lazy propagation. Lazy propagation improves performance of the analysis by re- ducing the information that the analysis must consider in the program. Ex- perimental validation of lazy propagation indicates a significant performance improvement. The design of the analysis has been evaluated on a large selection of bench- marks taken from online sources. The results shows that the analysis is able to identify bugs in real code in reasonable time. i Resume Web applikationer indeholder mange unikke udfordringer for designere af statisk analyse værktøjer. En af disse udfordringer er programmeringssproget Java- Script som bliver brugt til programmering i browseren. JavaScript er et kom- pliceret sprog med mange faldgruber og i forhold til andre sprog mangler det gode værktøjer til at hjælpe programmøren. Denne afhandling beskriver design og implementation af en statisk analyse for JavaScript. Vi beskriver designet af et statisk analyse værktøj for JavaScript som er bygget ved brug af det monotone framework. Analysen infererer detaljeret typeinformation om programmer. Denne information kan bruges til at finde fejl i koden s˚asom null pointer fejl og utilsigtede type konverteringer Analysen er sund, s˚aden kan bevise programmer fejlfri for visse klasser af fejl. JavaScript programmer bliver som regel kørt i en browser og bruger DOM APIet. De store udfordringer involveret i at understøtte dette miljø er browse- rens event loop og den objekt model som bliver brugt til at tilg˚aHTML siden. Vi adresserer begge disse udfordringer i designet af vores analyse. Dynamisk kode evaluering er udbredt i JavaScript applikationer. For at kunne h˚andtere dette i vores analyse har vi udviklet Unevalizer komponenten som kan transformere kode med dynamisk kode evaluering til ækvivalent kode uden. Via et studie af brugen af dynamisk kode evaluering i rigtige programmer har vi identificeret flere gennemg˚aende mønstre. Mange af disse mønstre kan automatisk transformeres til ækvivalent kode uden dynamisk kode evaluering og kan derved analyseres videre. Acceptabl udførselstid for analysen er nødvendig for at den er anvendeligt i praksis. For at opn˚adette har vi designet en udvidelse til analysen kaldet lazy propagation. Lazy propagation forbedrer udførselstiden ved at reduc- ere mængden af information, analysen skal behandle i programmet. Eksperi- mentelle resultater viser betydelige forbedringer af udførselstiden ved brug af lazy propagation. Designet af analysen er blevet evalueret p˚aet stort udvalg af benchmarks fundet p˚aInternettet. Resultaterne viser, at analysen er i stand til at finde fejl i rigtige programmer med et rimelig tidsforbrug. iii Acknowledgments I am indebted to my advisor Anders Møller for being a capable and useful mentor. He has been a great advisor both in sickness and in health during my time as a Ph.D student. I thank the entire Programming Languages group at Aarhus University for creating a great working environment. I still do not understand what is so great about Foosball though. A special thanks goes to my office mate Ian Zerny for having a decent taste in music and for not judging me on the days where I did not show up until after lunch. I also thank Mathias Schwarz for a giving a meticulous review of this dis- sertation, which has greatly improved it. I am also indebted to both Frank Tip and Satish Chandra who where both excellent hosts when I visited IBM Research Watson in Hawthorne and Ban- galore respectively. Finally I would like to thank my mother for supporting and encouraging me. Simon Holm Jensen Aarhus, January 27, 2013 v Contents Abstract i Resume iii Acknowledgments v Contents vi I Overview 1 1 Introduction 3 1.1 Hypothesis ............................. 3 1.2 Method ............................... 4 1.2.1 Implementation....................... 4 1.2.2 Experimentalevaluation . 4 1.3 Structure .............................. 5 1.4 Papers................................ 6 2 JavaScript and Web Development 7 2.1 ECMAScriptandJavaScript . 7 2.1.1 Prototypes ......................... 8 2.2 TheDocumentObjectModel . 9 2.2.1 Events............................ 9 2.2.2 AJAX............................ 9 2.2.3 An Example of DOM Usage and AJAX . 10 2.3 Dynamiccodeevaluation . 10 2.4 JavaScriptapplicationframeworks . 11 3 Static Analysis Background 13 3.1 Values................................ 13 3.1.1 Objects ........................... 14 3.2 Controlflow............................. 15 3.2.1 Flowsensitivity. 16 3.3 Representingprograms. 16 vi CONTENTS vii 3.4 Functions .............................. 16 3.4.1 Interproceduralanalysis . 17 3.4.2 Contextsensitivity . 18 3.5 Computingthefixpoint . 19 3.6 Alternativestostaticanalysis . 19 3.6.1 Typesystems........................ 19 3.6.2 Dynamicapproaches . 20 3.6.3 Semantics.......................... 21 4 TAJS 23 4.1 Designchoices............................ 23 4.1.1 WholeProgram....................... 23 4.1.2 SoundApproximation . 24 4.2 Overview .............................. 24 4.3 Lattice................................ 24 4.3.1 Programstate ....................... 25 4.3.2 Abstractvalues....................... 25 4.4 Transferfunctions ......................... 26 4.5 Recencyabstraction ........................ 27 4.6 LazyPropagation.......................... 28 4.6.1 Acallgraph......................... 28 4.6.2 Analysiswithlazypropagation . 28 4.7 ModelingtheBrowser ....................... 30 4.7.1 EventModel ........................ 31 4.8 TheUnevalizer ........................... 32 4.8.1 Measuring eval inpractice ................ 32 4.8.2 UnevalizerFramework . 33 4.8.3 Constantstrings ...................... 33 4.8.4 Dynamicallycreatedstrings . 34 4.9 Relatedwork ............................ 35 4.9.1 StaticanalysisforJavaScript . 36 4.9.2 DOMmodeling....................... 38 4.9.3 Dynamiccodeevaluation . 38 5 Evaluation 41 5.1 Researchquestions ......................... 41 5.2 Results................................ 42 5.3 Threatstovalidity ......................... 46 6 Conclusion 47 II Papers 49 7 Type Analysis for JavaScript 51 7.1 Introduction............................. 51 7.2 RelatedWork............................ 55 7.3 FlowGraphsforJavaScript . 57 7.4 The Analysis Lattice and Transfer Functions . 58 7.4.1 TransferFunctions . 60 viii CONTENTS 7.4.2 RecencyAbstraction . 61 7.4.3 InterproceduralAnalysis. 61 7.4.4 TerminationoftheAnalysis . 62 7.5 Experiments............................. 62 7.6 Conclusion ............................. 65 8 Lazy Propagation 67 8.1 Introduction............................. 67 8.2 ABasicAnalysisFramework . 69 8.2.1 AnalysisInstances . 69 8.2.2 DerivedLattices ...................... 70 8.2.3 ComputingtheSolution . 70 8.2.4 An Abstract Data Type for Transfer Functions . 71 8.2.5 Problems with the Basic Analysis Framework . 73 8.3 Extending the Framework with Lazy Propagation . 74 8.3.1 ModificationsoftheAnalysisLattice . 74 8.3.2 Modifications of the Abstract Data Type Operations . 75 8.3.3 RecoveringUnknownFieldValues . 77 8.4 ImplementationandExperiments . 81 8.5 RelatedWork............................ 82 8.6 Conclusion ............................. 83 8.7 TheoreticalProperties . 83 8.7.1 Termination......................... 84 8.7.2 Precision .......................... 84 8.7.3 Soundness.......................... 88 9 DOM Modeling 89 9.1 Introduction............................. 89 9.2 Challenges.............................. 92 9.2.1 TheJavaScriptLanguage . 92 9.2.2 TheHTMLDOMandBrowserAPI . 93 9.2.3 ApplicationDevelopmentPractice . 94 9.3 TheTAJSAnalyzer ........................ 95 9.4 ModelingtheHTMLDOMandBrowserAPI. 96 9.4.1 HTMLObjects......................
Recommended publications
  • CSCI 2041: Lazy Evaluation
    CSCI 2041: Lazy Evaluation Chris Kauffman Last Updated: Wed Dec 5 12:32:32 CST 2018 1 Logistics Reading Lab13: Lazy/Streams I Module Lazy on lazy Covers basics of delayed evaluation computation I Module Stream on streams A5: Calculon Lambdas/Closures I Arithmetic language Briefly discuss these as they interpreter pertain Calculon I 2X credit for assignment I 5 Required Problems 100pts Goals I 5 Option Problems 50pts I Eager Evaluation I Milestone due Wed 12/5 I Lazy Evaluation I Final submit Tue 12/11 I Streams 2 Evaluation Strategies Eager Evaluation Lazy Evaluation I Most languages employ I An alternative is lazy eager evaluation evaluation I Execute instructions as I Execute instructions only as control reaches associated expression results are needed code (call by need) I Corresponds closely to I Higher-level idea with actual machine execution advantages and disadvantages I In pure computations, evaluation strategy doesn’t matter: will produce the same results I With side-effects, when code is run matter, particular for I/O which may see different printing orders 3 Exercise: Side-Effects and Evaluation Strategy Most common place to see differences between Eager/Lazy eval is when functions are called I Eager eval: eval argument expressions, call functions with results I Lazy eval: call function with un-evaluated expressions, eval as results are needed Consider the following expression let print_it expr = printf "Printing it\n"; printf "%d\n" expr; ;; print_it (begin printf "Evaluating\n"; 5; end);; Predict results and output for both Eager and Lazy Eval strategies 4 Answers: Side-Effects and Evaluation Strategy let print_it expr = printf "Printing it\n"; printf "%d\n" expr; ;; print_it (begin printf "Evaluating\n"; 5; end);; Evaluation > ocamlc eager_v_lazy.ml > ./a.out Eager Eval # ocaml’s default Evaluating Printing it 5 Lazy Eval Printing it Evaluating 5 5 OCaml and explicit lazy Computations I OCaml’s default model is eager evaluation BUT.
    [Show full text]
  • Control Flow
    Control Flow COMS W4115 Prof. Stephen A. Edwards Spring 2002 Columbia University Department of Computer Science Control Flow “Time is Nature’s way of preventing everything from happening at once.” Scott identifies seven manifestations of this: 1. Sequencing foo(); bar(); 2. Selection if (a) foo(); 3. Iteration while (i<10) foo(i); 4. Procedures foo(10,20); 5. Recursion foo(int i) { foo(i-1); } 6. Concurrency foo() jj bar() 7. Nondeterminism do a -> foo(); [] b -> bar(); Ordering Within Expressions What code does a compiler generate for a = b + c + d; Most likely something like tmp = b + c; a = tmp + d; (Assumes left-to-right evaluation of expressions.) Order of Evaluation Why would you care? Expression evaluation can have side-effects. Floating-point numbers don’t behave like numbers. Side-effects int x = 0; int foo() { x += 5; return x; } int a = foo() + x + foo(); What’s the final value of a? Side-effects int x = 0; int foo() { x += 5; return x; } int a = foo() + x + foo(); GCC sets a=25. Sun’s C compiler gave a=20. C says expression evaluation order is implementation-dependent. Side-effects Java prescribes left-to-right evaluation. class Foo { static int x; static int foo() { x += 5; return x; } public static void main(String args[]) { int a = foo() + x + foo(); System.out.println(a); } } Always prints 20. Number Behavior Basic number axioms: a + x = a if and only if x = 0 Additive identity (a + b) + c = a + (b + c) Associative a(b + c) = ab + ac Distributive Misbehaving Floating-Point Numbers 1e20 + 1e-20 = 1e20 1e-20 1e20 (1 + 9e-7) + 9e-7 6= 1 + (9e-7 + 9e-7) 9e-7 1, so it is discarded, however, 1.8e-6 is large enough 1:00001(1:000001 − 1) 6= 1:00001 · 1:000001 − 1:00001 · 1 1:00001 · 1:000001 = 1:00001100001 requires too much intermediate precision.
    [Show full text]
  • 210 CHAPTER 7. NAMES and BINDING Chapter 8
    210 CHAPTER 7. NAMES AND BINDING Chapter 8 Expressions and Evaluation Overview This chapter introduces the concept of the programming environment and the role of expressions in a program. Programs are executed in an environment which is provided by the operating system or the translator. An editor, linker, file system, and compiler form the environment in which the programmer can enter and run programs. Interac- tive language systems, such as APL, FORTH, Prolog, and Smalltalk among others, are embedded in subsystems which replace the operating system in forming the program- development environment. The top-level control structure for these subsystems is the Read-Evaluate-Write cycle. The order of computation within a program is controlled in one of three basic ways: nesting, sequencing, or signaling other processes through the shared environment or streams which are managed by the operating system. Within a program, an expression is a nest of function calls or operators that returns a value. Binary operators written between their arguments are used in infix syntax. Unary and binary operators written before a single argument or a pair of arguments are used in prefix syntax. In postfix syntax, operators (unary or binary) follow their arguments. Parse trees can be developed from expressions that include infix, prefix and postfix operators. Rules for precedence, associativity, and parenthesization determine which operands belong to which operators. The rules that define order of evaluation for elements of a function call are as follows: • Inside-out: Evaluate every argument before beginning to evaluate the function. 211 212 CHAPTER 8. EXPRESSIONS AND EVALUATION • Outside-in: Start evaluating the function body.
    [Show full text]
  • Exam 1 Review: Solutions Capture the Dragons
    CSCI 1101B: Introduction to Computer Science Instructor: Prof. Harmon Exam 1 Review: Solutions Capture the Dragons Boolean Expressions 1. Of the following, which are Boolean expressions? (a)2+3 Not Boolean (b)2>3 Boolean (c) num >= 2 Boolean (d) num1 = num2 Not Boolean 2. If x = 3, and x <= y evaluates to True, what values can y have? y >= 3 3. Simplify each of the following expressions: (a) my_num or True Depends on what the value of my_num is. See rules as in #5. (b) False and "Mary" or True True (c) False and ("Mary" or True) False 4. Is x =< y the same as x <= y? No. Python only recognizes the latter. The former is invalid syntax. 5. If x = 1 and y = 2, explain the following results: (a) >>> x and y # = 2 (b) >>> x or y # = 1 Python uses lazy evaluation. • The expression x and y first evaluates x. If x is equivalent to False (or empty/zero), its value is returned. Otherwise, y is evaluated and the resulting value is returned. • The expression x or y first evaluates x. If x is equivalent to True (or non-empty/nonzero), its value is returned. Otherwise, y is evaluated and the resulting value is returned. 1 CSCI 1101B: Introduction to Computer Science Exam 1 Review: Solutions Conditionals 1. What is indentation, and how is it related to the concept of a code block? Indentation is the placement of text (to the left or right). Python uses indenta- tion to associate code into groups, or blocks. 2. What is the difference between a chained conditional and a nested conditional? Chained => if, elif, else Nested => conditionals exist (are "nested") inside each other 3.
    [Show full text]
  • Top Functional Programming Languages Based on Sentiment Analysis 2021 11
    POWERED BY: TOP FUNCTIONAL PROGRAMMING LANGUAGES BASED ON SENTIMENT ANALYSIS 2021 Functional Programming helps companies build software that is scalable, and less prone to bugs, which means that software is more reliable and future-proof. It gives developers the opportunity to write code that is clean, elegant, and powerful. Functional Programming is used in demanding industries like eCommerce or streaming services in companies such as Zalando, Netflix, or Airbnb. Developers that work with Functional Programming languages are among the highest paid in the business. I personally fell in love with Functional Programming in Scala, and that’s why Scalac was born. I wanted to encourage both companies, and developers to expect more from their applications, and Scala was the perfect answer, especially for Big Data, Blockchain, and FinTech solutions. I’m glad that my marketing and tech team picked this topic, to prepare the report that is focused on sentiment - because that is what really drives people. All of us want to build effective applications that will help businesses succeed - but still... We want to have some fun along the way, and I believe that the Functional Programming paradigm gives developers exactly that - fun, and a chance to clearly express themselves solving complex challenges in an elegant code. LUKASZ KUCZERA, CEO AT SCALAC 01 Table of contents Introduction 03 What Is Functional Programming? 04 Big Data and the WHY behind the idea of functional programming. 04 Functional Programming Languages Ranking 05 Methodology 06 Brand24
    [Show full text]
  • CS1101S Studio Session Week 11: Stream
    Welcome CS1101S Studio Session Week 11: Stream Niu Yunpeng [email protected] October 30, 2018 Niu Yunpeng CS1101S Studio Week 11 October 30, 2018 1 / 27 Overview 1 Lazy evaluation Computational model Function application 2 Stream Delayed evaluation Stream programming Niu Yunpeng CS1101S Studio Week 11 October 30, 2018 2 / 27 Lazy Evaluation Computational model Computational model is a useful guideline for us to understand how the interpreter works. Computational model may vary depending on programming language and the runtime system used. In CS1101S, we introduce two computational models: substitution model and environment model. What to expect In the coming weeks, these two models will still be valid. Niu Yunpeng CS1101S Studio Week 11 October 30, 2018 3 / 27 Lazy Evaluation Substitution model For stateless programming only: Evaluate all actual arguments; Replace all formal parameters with their actual arguments; Apply each statement in the function body (and get the return value); Repeat the first 3 steps until done. Niu Yunpeng CS1101S Studio Week 11 October 30, 2018 4 / 27 Lazy Evaluation Environment model For stateful programming: Each frame contains a series of bindings of names and values. The value of a variable depends on its environment, a sequence of frames up to the global frame. Each function call will create a new frame and extend its enclosing environment. Niu Yunpeng CS1101S Studio Week 11 October 30, 2018 5 / 27 Lazy Evaluation Function in JavaScript Function in JavaScript is a first-class citizen (object). They have a call method. The call method is triggered when this function is applied. Function application When a function is applied, “this” is prepanded to the list of parameters.
    [Show full text]
  • Monads for Functional Programming
    Monads for functional programming Philip Wadler, University of Glasgow? Department of Computing Science, University of Glasgow, G12 8QQ, Scotland ([email protected]) Abstract. The use of monads to structure functional programs is de- scribed. Monads provide a convenient framework for simulating effects found in other languages, such as global state, exception handling, out- put, or non-determinism. Three case studies are looked at in detail: how monads ease the modification of a simple evaluator; how monads act as the basis of a datatype of arrays subject to in-place update; and how monads can be used to build parsers. 1 Introduction Shall I be pure or impure? The functional programming community divides into two camps. Pure lan- guages, such as Miranda0 and Haskell, are lambda calculus pure and simple. Impure languages, such as Scheme and Standard ML, augment lambda calculus with a number of possible effects, such as assignment, exceptions, or continu- ations. Pure languages are easier to reason about and may benefit from lazy evaluation, while impure languages offer efficiency benefits and sometimes make possible a more compact mode of expression. Recent advances in theoretical computing science, notably in the areas of type theory and category theory, have suggested new approaches that may integrate the benefits of the pure and impure schools. These notes describe one, the use of monads to integrate impure effects into pure functional languages. The concept of a monad, which arises from category theory, has been applied by Moggi to structure the denotational semantics of programming languages [13, 14]. The same technique can be applied to structure functional programs [21, 23].
    [Show full text]
  • The Scala Programming Language
    The Scala Programming Language Mooly Sagiv Slides taken from Martin Odersky (EPFL) Donna Malayeri (CMU) Hila Peleg (TAU) Modern Functional Programming • Higher order • Modules • Pattern matching • Statically typed with type inference • Two viable alternatives • Haskel • Pure lazy evaluation and higher order programming leads to Concise programming • Support for domain specific languages • I/O Monads • Type classes • OCaml • Encapsulated side-effects via references Then Why aren’t FP adapted? • Education • Lack of OO support • Subtyping increases the complexity of type inference • Programmers seeks control on the exact implementation • Imperative programming is natural in certain situations Why Scala? (Coming from OCaml) • Runs on the JVM/.NET • Can use any Java code in Scala • Combines functional and imperative programming in a smooth way • Effective library • Inheritance • General modularity mechanisms The Java Programming Language • Designed by Sun 1991-95 • Statically typed and type safe • Clean and Powerful libraries • Clean references and arrays • Object Oriented with single inheritance • Interfaces with multiple inhertitence • Portable with JVM • Effective JIT compilers • Support for concurrency • Useful for Internet Java Critique • Downcasting reduces the effectiveness of static type checking • Many of the interesting errors caught at runtime • Still better than C, C++ • Huge code blowouts • Hard to define domain specific knowledge • A lot of boilerplate code • Sometimes OO stands in our way • Generics only partially helps Why
    [Show full text]
  • Comparison Between Lazy and Strict Evaluation
    View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Trepo - Institutional Repository of Tampere University Nayeong Song Comparison between lazy and strict evaluation Bachelor’s thesis Faculty of Information Technology and Communication Sciences (ITC) Examiner: Maarit Harsu Oct 2020 i ABSTRACT Nayeong Song: Comparison between lazy and strict evaluation Bachelor’s thesis Tampere University Bachelor’s Degree Programme in Science and Engineering Oct 2020 Evaluation strategy is the way to defne the order of function call’s argument’s evaluation. Most of the today’s programming languages employ strict programming paradigm, which is focused mostly on call-by-value and call-by-reference. However, call-by-name or call-by-need, which evaluates the expression lazily, is used only in functional programming languages and those are rather unfamiliar to these day’s programmers. In this thesis, the focus is on the comparison between diferent evaluation techniques but mostly focused on strict evaluation and lazy evaluation. First, the theoretical diference is presented in mathematical aspect in lambda calculus, and the practical examples are presented in Python and Haskell. The results show that a program can beneft lazy evaluation when evaluating non- terminable expressions or optimize the performance when the values are cached. However, in case the function has side efects, lazy evaluation cannot be used to- gether and it makes harder to predict the memory usage compared to strict evalu- ation. Keywords: evaluation strategy, lambda calculus, algorithm efciency, strict eval- uation, lazy evaluation, Haskell, Python The originality of this thesis has been checked using the Turnitin Originality Check service.
    [Show full text]
  • CS 251: Programming Languages Fall 2015 ML Summary, Part 5
    CS 251: Programming Languages Fall 2015 ML Summary, Part 5 These notes contain material adapted from notes for CSE 341 at the University of Washington by Dan Grossman. They have been converted to use SML instead of Racket and extended with some additional material by Ben Wood. Contents Introduction to Delayed Evaluation and Thunks .......................... 1 Lazy Evaluation with Delay and Force ................................. 2 Streams .................................................... 4 Memoization ................................................. 6 Integrating Lazy Evaluation into the Language ........................... 11 Introduction to Delayed Evaluation and Thunks A key semantic issue for a language construct is when are its subexpressions evaluated. For example, in ML (and similarly in Racket and most but not all programming languages), given e1 e2 ... en we evaluate the function arguments e2, ..., en once before we execute the function body and given a function fn ... => ... we do not evaluate the body until the function is called. This rule (\evaluate arguments in advance") goes by many names, including eager evaluation and call-by-value. (There is a family of names for parameter-passing styles referred to with call-by-.... Many are not particularly illuminating or downright confusing names, but we note them here for reference.) We can contrast eager evaluation with how if e1 then e2 else e3 works: we do not evaluate both e2 and e3. This is why: fun iffy x y z = if x then y else z is a function that cannot be used wherever
    [Show full text]
  • Programming Language Concepts Subroutines
    Programming Language Concepts Subroutines Janyl Jumadinova 23 February, 2017 Arguments are also called \actual parameters" (as opposed to \formal parameters" in the function definition) Arguments, Parameters 2/20 Arguments, Parameters Arguments are also called \actual parameters" (as opposed to \formal parameters" in the function definition) 2/20 Examples of Function Calls (Python) def f(a,b,c): ... return 100*a+10*b+c 3/20 I Named Arguments Examples of Function Calls (Python) def f(a=1,b=1,c=1): ... return 100*a+10*b+c I Default Parameter Values 4/20 Examples of Function Calls (Python) def f(a=1,b=1,c=1): ... return 100*a+10*b+c I Default Parameter Values I Named Arguments 4/20 Examples of Function Calls (Haskell) 5/20 Parameter Evaluation \Applicative Order" evaluation: arguments evaluated before the function call. \Eager" evaluation. 6/20 Parameter Evaluation \Normal Order" evaluation: arguments are not evaluated until they are needed (possibly never) 7/20 Parameter Evaluation \Lazy" evaluation: I arguments are evaluated at most once (possibly never). I Even though we used a Haskell example to illustrate \normal order", it is more accurate to call Haskell's evaluation order \lazy." I In normal order, a parameter could be evaluated more than once (i.e., evaluated each time it appears in the function). 8/20 Closures I In languages that support “first-class functions," a function may be a return value from another function; a function may be assigned to a variable. I This raises some issues regarding scope. 9/20 Closures 10/20 Another solution (used by JavaScript and most other statically-scoped languages): bind the variables that are in the environment where the function is defined.
    [Show full text]
  • Lazy and Eager Evaluation
    Functional Programming and Specification Lecture Note 1, 4 February 2011 Lazy and Eager Evaluation Recall that evaluation is “call by value” in ML: before performing function application, we have to evaluate the argument. This happens even if the argument isn’t needed for the result, as in fun f(y) = 1 Because of this, ML is called an eager language. Another terminology for essentially the same thing is that ML is strict; this means that applying f or any other function to an expression exp having no value (because exp fails to terminate) gives an expression that has no value. Some functional languages use lazy evaluation, also known as “call by need”, meaning that an expression will not be evaluated unless its value is actually required in order to produce the result. In a lazy language, f(exp) = 1, even if exp fails to terminate — the argument to f doesn’t need to be evaluated to determine the result. This isn’t done by analyzing the definition of f, but rather by delaying evaluation of the argument until its value is required. One can’t analyze functions in general to see if they use their arguments — one reason (not the only one!) is that in ML, any function might be the outcome of a complicated computation rather than just text. Not evaluating an unused argument saves time. If its evaluation doesn’t terminate, not evaluating it saves a lot of time! Here is another example: fun g(x,y,z) = if x<2 then y+3 else z+6 Depending on the value of x, either the value of y or the value of z will be required, but not both.
    [Show full text]