2010
DOI: 10.1007/978-3-642-16901-4_31
|View full text |Cite
|
Sign up to set email alerts
|

Loop Invariant Synthesis in a Combined Domain

Abstract: Automated verification of memory safety and functional correctness for heap-manipulating programs has been a challenging task, especially when dealing with complex data structures with strong invariants involving both shape and numerical properties. Existing verification systems usually rely on users to supply annotations, which can be tedious and error-prone and can significantly restrict the scalability of the verification system. In this paper, we reduce the need of user annotations by automatically inferri… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
3
1
1

Citation Types

0
14
0

Year Published

2011
2011
2017
2017

Publication Types

Select...
3
2
1

Relationship

4
2

Authors

Journals

citations
Cited by 11 publications
(14 citation statements)
references
References 30 publications
0
14
0
Order By: Relevance
“…The algorithm for refinement (CA Gen Solve) is given in Fig 8. As illustrated in Section 2.3, the analysis proceeds in two steps for a primary method with shape information given in specification, namely (1) forward analysis (at lines [21][22] and (2) pure constraint abstraction generation and solving (at lines [23][24][25][26][27][28][29][30].…”
Section: Refining Specifications For Primary Methodsmentioning
confidence: 99%
See 2 more Smart Citations
“…The algorithm for refinement (CA Gen Solve) is given in Fig 8. As illustrated in Section 2.3, the analysis proceeds in two steps for a primary method with shape information given in specification, namely (1) forward analysis (at lines [21][22] and (2) pure constraint abstraction generation and solving (at lines [23][24][25][26][27][28][29][30].…”
Section: Refining Specifications For Primary Methodsmentioning
confidence: 99%
“…Another piece of work, by Chang et al [23] and Chang and Rival [24], employs inductive checkers and checker segments to express shape and numerical information. Our previous loop invariant synthesis [25] also infers strong loop invariants with both shape and numerical information but is limited to while loop analysis. Compared with their works, ours addresses specification refinement with pure properties (including numerical and bag ones) in both pre-and postconditions by processing shape and pure information in two phases with the help of pure abduction.…”
Section: Related Workmentioning
confidence: 99%
See 1 more Smart Citation
“…Relational inductive shape analysis [6] employs inductive checkers to express shape and numerical information, where they only demonstrate how to analyse a program with one particular shape. Our previous loop invariant synthesis [26] also infers strong loop invariants. Compared with them, this work is inter-procedural and addresses specification refinement with pure properties in both pre-and postconditions in two phases (for shape and pure resp.)…”
Section: Related Work and Conclusionmentioning
confidence: 99%
“…Although the specifications written so far have been supplied by us, recent developments [25,26,28,27] in Hip/Sleek will allow the automatic inference of properties, making our approach more scalable.…”
Section: Future Workmentioning
confidence: 99%