Scratching the Surface of ./configure: Learning the Effects of Compile-Time Options on Binary Size and Gadgets

• Published in: Reuse and Software Quality Vol. 13297; pp. 41 - 58
• Main Authors: Tërnava, Xhevahire, Acher, Mathieu, Lesoil, Luc, Blouin, Arnaud, Jézéquel, Jean-Marc
• Format: Book Chapter
• Language: English
• Published: Switzerland Springer International Publishing AG 2022; Springer International Publishing
• Series: Lecture Notes in Computer Science
• Subjects: Binary size; Compile-time variability; Configurable systems; Gadgets; Non-functional properties; Statistical learning; System security
• ISBN: 3031081285; 9783031081286
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/978-3-031-08129-3_3

Numerous software systems are configurable through compile-time options and the widely used ./configure. However, the combined effects of these options on binary’s non-functional properties (size and attack surface) are often not documented, and or not well understood, even by experts. Our goal is to provide automated support for exploring and comprehending the configuration space (a.k.a., surface) of compile-time options using statistical learning techniques. In this paper, we perform an empirical study on four C-based configurable systems. We measure the variation of binary size and attack surface (by quantifying the number of code reuse gadgets) in over 400 compile-time configurations of a subject system. We then apply statistical learning techniques on top of our build infrastructure to identify how compile-time options relate to non-functional properties. Our results show that, by changing the default configuration, the system’s binary size and gadgets vary greatly (roughly -79% $$-79\%$$ to 244% $$244\%$$ and -77% $$-77\%$$ to 30% $$30\%$$ , respectively). Then, we found out that identifying the most influential options can be accurately learned with a small training set, while their relative importance varies across size and attack surface for the same system. Practitioners can use our approach and artifacts to explore the effects of compile-time options in order to take informed decisions when configuring a system with ./configure.