Static Analysis of String Manipulations in Critical Embedded C Programs

AbstractGoblintis a static analysis framework for C programs specializing in data race analysis. It relies on thread-modular abstract interpretation where thread interferences are accounted for by means of flow-insensitive global invariants.

Download Full-text

A Memory Model for Static Analysis of C Programs

Lecture Notes in Computer Science - Leveraging Applications of Formal Methods, Verification, and Validation ◽

10.1007/978-3-642-16558-0_44 ◽

2010 ◽

pp. 535-548 ◽

Cited By ~ 16

Author(s):

Zhongxing Xu ◽

Ted Kremenek ◽

Jian Zhang

Keyword(s):

Static Analysis ◽

Memory Model ◽

C Programs

Download Full-text

A Decision Tree Lifted Domain for Analyzing Program Families with Numerical Features

Fundamental Approaches to Software Engineering - Lecture Notes in Computer Science ◽

10.1007/978-3-030-71500-7_4 ◽

2021 ◽

pp. 67-86

Author(s):

Aleksandar S. Dimovski ◽

Sven Apel ◽

Axel Legay

Keyword(s):

Decision Tree ◽

Decision Trees ◽

Static Analysis ◽

Program Analysis ◽

Empirical Evaluation ◽

Linear Constraints ◽

Combinatorial Explosion ◽

C Programs ◽

Feature Based ◽

Family Based

AbstractLifted (family-based) static analysis by abstract interpretation is capable of analyzing all variants of a program family simultaneously, in a single run without generating any of the variants explicitly. The elements of the underlying lifted analysis domain are tuples, which maintain one property per variant. Still, explicit property enumeration in tuples, one by one for all variants, immediately yields combinatorial explosion. This is particularly apparent in the case of program families that, apart from Boolean features, contain also numerical features with large domains, thus giving rise to astronomical configuration spaces.The key for an efficient lifted analysis is a proper handling of variability-specific constructs of the language (e.g., feature-based runtime tests and $$\texttt {\#if}$$ # if directives). In this work, we introduce a new symbolic representation of the lifted abstract domain that can efficiently analyze program families with numerical features. This makes sharing between property elements corresponding to different variants explicitly possible. The elements of the new lifted domain are constraint-based decision trees, where decision nodes are labeled with linear constraints defined over numerical features and the leaf nodes belong to an existing single-program analysis domain. To illustrate the potential of this representation, we have implemented an experimental lifted static analyzer, called SPLNum$$^2$$ 2 Analyzer, for inferring invariants of C programs. An empirical evaluation on BusyBox and on benchmarks from SV-COMP yields promising preliminary results indicating that our decision trees-based approach is effective and outperforms the baseline tuple-based approach.

Download Full-text

Modular Static Analysis of String Manipulations in C Programs

Static Analysis - Lecture Notes in Computer Science ◽

10.1007/978-3-319-99725-4_16 ◽

2018 ◽

pp. 243-262 ◽

Cited By ~ 4

Author(s):

Matthieu Journault ◽

Antoine Miné ◽

Abdelraouf Ouadjaout

Keyword(s):

Static Analysis ◽

C Programs

Download Full-text