A Fast Verified Liveness Analysis in SSA Form

Léchenet, Jean-Christophe; Blazy, Sandrine; Pichardie, David

doi:10.1007/978-3-030-51054-1_19

Cited by 1 publication

(2 citation statements)

References 13 publications

(50 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Infeasible paths are also caused by the conflicting clauses found within certain paths. Moreover, infeasible paths could potentially be associated with conditional statements specific to a variable (which is also one of the major causes of the inability to access specific aspects of a program [19,20]). Therefore, to improve the outcomes of the static analysis, a detection stage of the feasible paths within the source code should be in place.…”

Section: Background 21 Static Analysismentioning

confidence: 99%

See 1 more Smart Citation

An Approach for Detecting Feasible Paths Based on Minimal SSA Representation and Symbolic Execution

2021

View full text Add to dashboard Cite

Static analysis is one of the techniques used today to analyze source codes and minimize the issue of software vulnerability. Static analysis has the ability to observe all possible software paths in an application through the scrutiny of a web application’s source code. Among those paths, some may be considered feasible paths, which refer to any paths that the test cases can execute. The detection of feasible paths in the results of a static analysis helps to minimize the false positive rate. However, the detection of feasible paths can be challenging, especially for programs that have multiple conditions in the same branch. The aim is to ensure that each feasible path is detected only once (not duplicated). This paper proposes an approach based on minimal static single assignment (MSSA) form and symbolic execution to detect feasible paths. The proposed approach starts by converting the source code into an abstract syntax tree (AST), followed by converting the AST to minimal SSA representation, which helps to decrease the number of instructions in the SSA form. An algorithm was built to examine all of the instructions of the SSA form, identify whole paths in the source code, and extract constraints along each path. A path weight method (PWM) is proposed in this work to avoid detecting duplicated feasible paths. The satisfiability modulo theory (SMT) solver was used to check the satisfiability of each path condition. The proposed approach was tested on seven well-known test programs that have been used in related studies and 10 large scale programs. The experimental results indicate that the proposed method (PWM) can avoid detecting duplicated feasible paths, and the proposed approach reduced the time required for generating the paths compared to that in related studies.

show abstract

Section: Background 21 Static Analysismentioning

confidence: 99%

“…However, this representation introduces a complication at join points of different flow branches. To solve this problem, a φ function is used in places where we could not pinpoint the exact variable "version" [19,20]. A code corresponding to the φ function usage and a simplified graph excerpt are shown in Figure 2b.…”

Section: Background 21 Static Analysismentioning

confidence: 99%