Pointer analysis is a fundamental static program analysis, with a rich literature and wide
applications. The goal of pointer analysis is to compute an approximation of the set of …

Precise static analyses are context-, field-and flow-sensitive. Context-and field-sensitivity are
both expressible as context-free language (CFL) reachability problems. Solving both CFL …

Although it is common practice for kernel fuzzers to leverage type information of system
calls, current Windows kernel fuzzers do not follow the practice as most system calls are …

Context sensitivity is an essential technique for ensuring high precision in Java pointer
analyses. It has been observed that applying context sensitivity partially, only on a select …

Mainstream points-to analysis techniques for object-oriented languages rely predominantly
on the allocation-site abstraction to model heap objects. We present MAHJONG, a novel …

Over the past decades, context sensitivity has been considered as one of the most effective
ideas for improving the precision of pointer analysis for Java. Different from the extremely …

Context sensitivity is an essential technique for ensuring high precision in static analyses. It
has been observed that applying context sensitivity partially, only on a select subset of the …

Existing precise context-sensitive heap analyses do not scale well for large OO programs.
Further, identifying the right context abstraction becomes quite intriguing as two of the most …

Traditional context-sensitive pointer analysis is hard to scale for large and complex Java
programs. To address this issue, a series of selective context-sensitivity approaches have …

We present Graphick, a new technique for automatically learning graph-based heuristics for
pointer analysis. Striking a balance between precision and scalability of pointer analysis …