Finding bugs efficiently with a SAT solver

6th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, ESEC/FSE 2007

Volumn , Issue , 2007, Pages 195-204

  Dolby, Julian ^a   Vaziri, Mandana ^a   Tip, Frank ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Model checking; SAT solving; Slicing; Specification

Indexed keywords

SAT SOLVING; SLICING; CHECKING CODES; CONSTRAINT SOLVERS; ENCODINGS; INTEGER VALUES; JAVA COLLECTIONS; LOGICAL LEVELS; RELATIONAL LOGICS; SAT SOLVERS; SLICING ALGORITHMS; SPARSE ARRAYS;

ENCODING (SYMBOLS); LOGIC PROGRAMMING; MODEL CHECKING; PROBLEM SOLVING; SOFTWARE ENGINEERING; SPECIFICATIONS; BOOLEAN FUNCTIONS; CODES (SYMBOLS); COMPUTER PROGRAMMING LANGUAGES; COMPUTER SOFTWARE; DATA STRUCTURES; FILE ORGANIZATION; JAVA PROGRAMMING LANGUAGE; THEOREM PROVING;

PROGRAM DEBUGGING;

EID: 37849010680     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1287624.1287653     Document Type: Conference Paper

References (35)

1. Spin model checker. http://spinroot.com/spin/whatispin.html.
2. BALL, T., AND RAJAMANI, S. K. The SLAM project: Debugging system software via static analysis. In POPL '02: Proceeding of the Symposium on the Principles of Programming Languages (2002).
3. BIERE, A., CIMATTI, A., AND CLARKE, E. Symbolic model checking without BDDs. In International Conference on Tools and Algorithms for the Construction and Analysis of Systems (1999).
4. BOYAPATI, C., KHURSHID, S., AND MARINOV, D. Korat: Automated testing based on Java predicates. In ISSTA '02: Proceedings of the International Symposium on Software Testing and Analysis (2002).
5. CIMATTI, A., CLARKE, E., GROCE, A., JHA, S., AND VEITH, H. NUSMV: A new symbolic model verifier. In CAV'99: Proceeding of the International Conference on Computer-Aided Verification (1999).
6. CORBETT, J. C., DWYER, M. B., HATCLIFF, J., LAUBACH, S., PASAREANU, C. S., ROBBY, AND ZHENG, H. Bandera: extracting finite-state models from Java source code. In International Conference on Software Engineering (2000).
7. CYTRON, R., FERRANTE, J., ROSEN, B. K., WEGMAN, M. N., AND ZADECK, F. K. Efficiently computing static single assignment form and the control dependence graph. ACM TOPLAS 13, 4 (1991), 451-490.
8. DARGA, P., AND BOYAPATI, C. Efficient software model checking of data structure properties. In OOPSLA'06: Proceedings of the International Conference on Object-Oriented Programming, Systems, Languages, and Applications (2006).
9. DENNIS, G., CHANG, F. S.-H., AND JACKSON, D. Modular verification of code with sat. In ISSTA '06: Proceedings of the International Symposium on Software Testing and Analysis (2006).
10. Java equals() and compareto() contracts. http://java.sun.com/j2se/1.5.0/ docs/api/java/lang/package-summary.html.
11. FLANAGAN, C., LEINO, K. R. M., LILLIBRIDGE, M., NELSON, G., SAXE, J. B., AND STATA, R. Extended static checking for Java. In PLDI'02: Proceedings of the International Conference on Programming Language Design and Implementation (2002).
12. GRAMMATECH, I. Codesurfer, http://www. grammatech.com/products/ codesurfer/index.html.
13. HATCLIFF, J., CORBETT, J. C., DWYER, M. B., SOKOLOWSKI, S., AND ZHENG, H. A formal study of slicing for multi-threaded programs with JVM concurrency primitives. In SAS '99: Proceedings of the International Symposium on Static Analysis (1999).
14. HATCLIFF, J., DWYER, M. B., AND ZHENG, H. Slicing software for model construction. Higher Order Symbol. Comput. 13, 4 (2000), 315-353.
15. HEITMEYER, C., JAMES KIRBY, J., LABAW, B., ARCHER, M., AND BHARADWAJ, R. Using abstraction and model checking to detect safety violations in requirements specifications. IEEE Trans. Softw. Eng. 24, 11 (1998), 927-948.
16. HENZINGER, T. A., JHALA, R., MAJUMDAR, R., AND SUTRE, G. Lazy abstraction. In Symposium on the Principles of Programming Languages (2002).
17. HOVEMEYER, D., AND PUGH, W. Finding bugs is easy. SIGPLAN Notices 39, 12 (2004), 92-106.
18. JACKSON, D. Automating first-order relational logic. In FSE'00: Proceedings of the International Symposium on Foundations of Software Engineering (2000).
19. JACKSON, D., SHLYAKHTER, I., AND SRIDHARAN, M. A micromodularity mechanism. In FSE / ESEC'01: Proceedings of the International Symposium on Foundations of Software Engineering / European Software Engineering Conference (2001).
20. JACKSON, D., AND VAZIRI, M. Finding bugs with a constraint solver. In ISSTA '00: Proceedings of the International Symposium on Software Testing and Analysis (2000).
21. KHURSHID, S., PASAREANU, C., AND VISSER, W. Generalized symbolic execution for model checking and testing. In TACAS'03: Proceedings of the International Conference on Tools and Algorithms for the Construction and Analysis of Systems (2003).
22. LEV-AMI, T., AND SAGIV, M. TVLA: A system for implementing static analyses. In Proceedings of the International Symposium on Static Analysis (2000).
23. MARINOV, D., AND KHURSHID, S. TestEra: A novel framework for automated testing of Java programs. In ASE'01: Proceedings of the International Conference on Automated Software Engineering (2001).
24. MCMILLAN, K. Symbolic Model Checking. Kluwer Academic Publishers, 1993.
25. MILLETT, L. I., AND TEITELBAUM, T. Slicing Promela and its applications to model checking. In Proceedings of the 4th International SPIN Workshop (1998).
26. TAGHDIRI, M. Inferring specifications to detect errors in code. In Proceedings of the International Conference on Automated Software Engineering (2004).
27. TIP, F. A survey of program slicing techniques. Journal of Programming Languages 3, 3 (1995), 121-189.
28. TORLAK, E., AND JACKSON, D. Kodkod: A relational model finder. In TACAS'01: Proceedings of the International Conference on Tools and Algorithms for the Construction and Analysis of Systems (2007).
29. UZUNCAOVA, E., AND KHURSHID, S. Kato: A program slicing tool for declarative specifications. In International Conference on Software Engineering (2007).
30. VALLÉE-RAI, R., CO, P., GAGNON, E., HENDREN, L., LAM, P., AND SUNDARESAN, V. Soot - a Java bytecode optimization framework. In CASCON '99: Proceedings of the Conference of the Centre for Advanced Studies on Collaborative research (1999).
31. VAZIRI, M., AND JACKSON, D. Checking properties of heap-manipulating procedures with a constraint solver. In TACAS'03: Proceedings of the International Conference on Tools and Algorithms for the Construction and Analysis of Systems (2003).
32. VAZIRI, M., TIP, F., FINK, S., AND DOLBY, J. Declarative object identity using relation types. In ECOOP'07: Proceedings of the European Conference on Object-Oriented Programming (2007), pp. 54-78.
33. VISSER, W., HAVELUND, K., BRAT, G. P., PARK, S., AND LERDA, F. Model checking programs. Autom. Softw. Eng. 10, 2 (2003), 203-232.
34. Watson Libraries for Analysis (WALA). http://wala.sourceforge.net/.
35. XLE, Y., AND ALKEN, A. Saturn: A scalable framework for error detection using boolean satisfiability. Transactions on Programming Languages and Systems, to appear.