Byte-precise verification of low-level list manipulation
K Dudka, P Peringer, T Vojnar - … Symposium, SAS 2013, Seattle, WA, USA …, 2013 - Springer
We propose a new approach to shape analysis of programs with linked lists that use low-
level memory operations. Such operations include pointer arithmetic, safe usage of invalid …
level memory operations. Such operations include pointer arithmetic, safe usage of invalid …
Sound Borrow-Checking for Rust via Symbolic Semantics
S Ho, A Fromherz, J Protzenko - … of the ACM on Programming Languages, 2024 - dl.acm.org
The Rust programming language continues to rise in popularity, and as such, warrants the
close attention of the programming languages community. In this work, we present a new …
close attention of the programming languages community. In this work, we present a new …
A Dependent Nominal Physical Type System for Static Analysis of Memory in Low Level Code
J Simonnet, M Lemerre, M Sighireanu - Proceedings of the ACM on …, 2024 - dl.acm.org
We tackle the problem of checking non-proof-carrying code, ie automatically proving type-
safety (implying in our type system spatial memory safety) of low-level C code or of machine …
safety (implying in our type system spatial memory safety) of low-level C code or of machine …
Predator shape analysis tool suite
Predator Shape Analysis Tool Suite | SpringerLink Skip to main content Advertisement
SpringerLink Account Menu Find a journal Publish with us Track your research Search Cart …
SpringerLink Account Menu Find a journal Publish with us Track your research Search Cart …
Modular construction of shape-numeric analyzers
The aim of static analysis is to infer invariants about programs that are precise enough to
establish semantic properties, such as the absence of run-time errors. Broadly speaking …
establish semantic properties, such as the absence of run-time errors. Broadly speaking …
Template-based verification of heap-manipulating programs
V Malík, M Hruska, P Schrammel… - 2018 Formal Methods in …, 2018 - ieeexplore.ieee.org
We propose a shape analysis suitable for analysis engines that perform automatic invariant
inference using an SMT solver. The proposed solution includes an abstract template domain …
inference using an SMT solver. The proposed solution includes an abstract template domain …
Reduced product combination of abstract domains for shapes
Real-world data structures are often enhanced with additional pointers capturing alternative
paths through a basic inductive skeleton (eg, back pointers, head pointers). From the static …
paths through a basic inductive skeleton (eg, back pointers, head pointers). From the static …
Lightweight shape analysis based on physical types
To understand and detect possible errors in programs manipulating memory, static analyses
of various levels of precision have been introduced, yet it remains hard to capture both …
of various levels of precision have been introduced, yet it remains hard to capture both …
Calling context abstraction with shapes
Interprocedural program analysis is often performed by computing procedure summaries.
While possible, computing adequate summaries is difficult, particularly in the presence of …
While possible, computing adequate summaries is difficult, particularly in the presence of …
Pointer life cycle types for lock-free data structures with memory reclamation
We consider the verification of lock-free data structures that manually manage their memory
with the help of a safe memory reclamation (SMR) algorithm. Our first contribution is a type …
with the help of a safe memory reclamation (SMR) algorithm. Our first contribution is a type …