Program Analysis with Local Policy Iteration

作者: Egor George Karpenkov , David Monniaux , Philipp Wendler

DOI: 10.1007/978-3-662-49122-5_6

关键词: Branching (version control)Program analysisSoftware verificationTemplateComputer scienceScalabilityLocal policyAlgorithm

摘要: We present a new algorithm for deriving numerical invariants that combines the precision of max-policy iteration with flexibility and scalability conventional Kleene iterations. It is defined in Configurable Program Analysis (CPA) framework, thus allowing inter-analysis communication. It uses adjustable-block encoding order to traverse loop-free program sections, possibly containing branching, without introducing extra abstraction. Our technique operates over any template linear constraint domain, including interval octagon domains; templates can also be derived from source. The implementation evaluated on set benchmarks Software Verification Competition (SV-Comp). competes favorably state-of-the-art analyzers.

参考文章(25)
François Bourdoncle, Efficient chaotic iteration strategies with widenings formal methods. pp. 128- 141 ,(1993) , 10.1007/BFB0039704
Pavel Shved, Mikhail Mandrykin, Vadim Mutilin, Predicate analysis with BLAST 2.7 tools and algorithms for construction and analysis of systems. pp. 525- 527 ,(2012) , 10.1007/978-3-642-28756-5_39
Pierre Roux, Pierre-Loïc Garoche, Integrating Policy Iterations in Abstract Interpreters Automated Technology for Verification and Analysis. pp. 240- 254 ,(2013) , 10.1007/978-3-319-02444-8_18
Dirk Beyer, Software Verification and Verifiable Witnesses Tools and Algorithms for the Construction and Analysis of Systems. pp. 401- 416 ,(2015) , 10.1007/978-3-662-46681-0_31
Nikolaj Bjørner, Anh-Dung Phan, Lars Fleckenstein, νZ - An Optimizing SMT Solver Tools and Algorithms for the Construction and Analysis of Systems. pp. 194- 199 ,(2015) , 10.1007/978-3-662-46681-0_14
Sriram Sankaranarayanan, Henny B. Sipma, Zohar Manna, Scalable Analysis of Linear Systems Using Mathematical Programming Lecture Notes in Computer Science. pp. 25- 41 ,(2005) , 10.1007/978-3-540-30579-8_2
David Monniaux, Laure Gonnord, Using bounded model checking to focus fixpoint iterations static analysis symposium. ,vol. 6887, pp. 369- 385 ,(2011) , 10.1007/978-3-642-23702-7_27
Thomas Gawlitza, Helmut Seidl, Precise Relational Invariants Through Strategy Iteration Computer Science Logic. pp. 23- 40 ,(2007) , 10.1007/978-3-540-74915-8_6
Stephane Gaubert, Eric Goubault, Ankur Taly, Sarah Zennou, Static analysis by policy iteration on relational domains european symposium on programming. pp. 237- 252 ,(2007) , 10.1007/978-3-540-71316-6_17
Thomas Gawlitza, Helmut Seidl, Precise fixpoint computation through strategy iteration european symposium on programming. ,vol. 4421, pp. 300- 315 ,(2007) , 10.1007/978-3-540-71316-6_21