Byte-precise verification of low-level list manipulation

K Dudka, P Peringer, T Vojnar - … Symposium, SAS 2013, Seattle, WA, USA …, 2013 - Springer
We propose a new approach to shape analysis of programs with linked lists that use low-
level memory operations. Such operations include pointer arithmetic, safe usage of invalid …

Sound Borrow-Checking for Rust via Symbolic Semantics

S Ho, A Fromherz, J Protzenko - … of the ACM on Programming Languages, 2024 - dl.acm.org
The Rust programming language continues to rise in popularity, and as such, warrants the
close attention of the programming languages community. In this work, we present a new …

A Dependent Nominal Physical Type System for Static Analysis of Memory in Low Level Code

J Simonnet, M Lemerre, M Sighireanu - Proceedings of the ACM on …, 2024 - dl.acm.org
We tackle the problem of checking non-proof-carrying code, ie automatically proving type-
safety (implying in our type system spatial memory safety) of low-level C code or of machine …

Predator shape analysis tool suite

L Holík, M Kotoun, P Peringer, V Šoková, M Trtík… - Hardware and Software …, 2016 - Springer
Predator Shape Analysis Tool Suite | SpringerLink Skip to main content Advertisement
SpringerLink Account Menu Find a journal Publish with us Track your research Search Cart …

Modular construction of shape-numeric analyzers

BYE Chang, X Rival - arXiv preprint arXiv:1309.5138, 2013 - arxiv.org
The aim of static analysis is to infer invariants about programs that are precise enough to
establish semantic properties, such as the absence of run-time errors. Broadly speaking …

Template-based verification of heap-manipulating programs

V Malík, M Hruska, P Schrammel… - 2018 Formal Methods in …, 2018 - ieeexplore.ieee.org
We propose a shape analysis suitable for analysis engines that perform automatic invariant
inference using an SMT solver. The proposed solution includes an abstract template domain …

Reduced product combination of abstract domains for shapes

A Toubhans, BYE Chang, X Rival - International Workshop on Verification …, 2013 - Springer
Real-world data structures are often enhanced with additional pointers capturing alternative
paths through a basic inductive skeleton (eg, back pointers, head pointers). From the static …

Lightweight shape analysis based on physical types

O Nicole, M Lemerre, X Rival - International Conference on Verification …, 2022 - Springer
To understand and detect possible errors in programs manipulating memory, static analyses
of various levels of precision have been introduced, yet it remains hard to capture both …

Calling context abstraction with shapes

X Rival, BYE Chang - ACM SIGPLAN Notices, 2011 - dl.acm.org
Interprocedural program analysis is often performed by computing procedure summaries.
While possible, computing adequate summaries is difficult, particularly in the presence of …

Pointer life cycle types for lock-free data structures with memory reclamation

R Meyer, S Wolff - Proceedings of the ACM on Programming Languages, 2019 - dl.acm.org
We consider the verification of lock-free data structures that manually manage their memory
with the help of a safe memory reclamation (SMR) algorithm. Our first contribution is a type …