Mixing type checking and symbolic execution

Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)

Volumn , Issue , 2010, Pages 436-447

  Khoo, Yit Phang ^a   Chang, Bor Yuh Evan ^b   Foster, Jeffrey S ^a  

^a UNIVERSITY OF MARYLAND   (United States)

^b UNIVERSITY OF COLORADO   (United States)

Author keywords

false alarms; mix; mix rules; mixed off the shelf analysis; precision; symbolic execution; type checking

Indexed keywords

ALGORITHMIC ENGINEERING; CORE ALGORITHMS; END USERS; FALSE ALARMS; INFERENCE SYSTEMS; NULL TYPE; OFF-THE-SHELF SYSTEMS; PROTOTYPE IMPLEMENTATIONS; SOFTWARE DOMAINS; SOFTWARE SYSTEMS; SOUND ANALYSIS; SYMBOLIC EXECUTION; TYPECHECKING;

ALGORITHMS; C (PROGRAMMING LANGUAGE); COMPUTER SOFTWARE; DESIGN; ERRORS; HUMAN COMPUTER INTERACTION; JAVA PROGRAMMING LANGUAGE; LINGUISTICS; SOFTWARE PROTOTYPING; STATIC ANALYSIS;

PRECISION ENGINEERING;

EID: 77954708506     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1806596.1806645     Document Type: Conference Paper

References (29)

1. Thomas Ball and Sriram K. Rajamani. The SLAM project: debugging system software via static analysis. In Principles of Programming Languages (POPL), pages 1-3, 2002.
2. Richard Bornat. Proving pointer programs in Hoare logic. In Mathematics of Program Construction (MPC), pages 102-126, 2000.
3. Cristian Cadar, Vijay Ganesh, Peter M. Pawlowski, David L. Dill, and Dawson R. Engler. EXE: automatically generating inputs of death. In Computer and Communications Security (CCS), pages 322-335, 2006.
4. Cristian Cadar, Daniel Dunbar, and Dawson R. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Operating Systems Design and Implementation (OSDI), pages 209-224, 2008.
5. James C. Corbett, Matthew B. Dwyer, John Hatcliff, Shawn Laubach, Corina S. Pǎsǎreanu, Robby, and Hongjun Zheng. Bandera: extracting finite-state models from Java source code. In International Conference on Software Engineering (ICSE), pages 439-448, 2000.
6. Patrick Cousot and Radhia Cousot. Systematic design of program analysis frameworks. In Principles of Programming Languages (POPL), pages 269-282, 1979.
7. Cormac Flanagan. Hybrid type checking. In Principles of Programming Languages (POPL), pages 245-256, 2006.
8. Jeffrey S. Foster, Robert Johnson, John Kodumal, and Alex Aiken. Flowinsensitive type qualifiers. ACM Trans. Program. Lang. Syst., 28(6): 1035-1087, 2006.
9. Vijay Ganesh and David L. Dill. A decision procedure for bit-vectors and arrays. In Computer-Aided Verification (CAV), pages 519-531, July 2007.
10. Patrice Godefroid. Compositional dynamic test generation. In Principles of Programming Languages (POPL), pages 47-54, 2007.
11. Patrice Godefroid, Nils Klarlund, and Koushik Sen. DART: directed automated random testing. In Programming Language Design and Implementation (PLDI), pages 213-223, 2005.
12. Sumit Gulwani and Ashish Tiwari. Combining abstract interpreters. In Programming Language Design and Implementation (PLDI), pages 376-386, 2006.
13. Samuel Z. Guyer and Calvin Lin. Error checking with client-driven pointer analysis. Sci. Comput. Program., 58(1-2):83-114, 2005.
14. Thomas A. Henzinger, Ranjit Jhala, Rupak Majumdar, and Kenneth L. McMillan. Abstractions from proofs. In Principles of Programming Languages (POPL), pages 232-244, 2004.
15. Khoo Yit Phang, Bor-Yuh Evan Chang, and Jeffrey S. Foster. Mixing type checking and symbolic execution (extended version). Technical Report CS-TR-4954, Department of Computer Science, University of Maryland, College Park, 2010.
16. James C. King. Symbolic execution and program testing. Commun. ACM, 19(7):385-394, 1976.
17. Sorin Lerner, David Grove, and Craig Chambers. Composing dataflow analyses and transformations. In Principles of Programming Languages (POPL), pages 270-282, 2002.
18. Rupak Majumdar and Koushik Sen. Hybrid concolic testing. In International Conference on Software Engineering (ICSE), pages 416-426, 2007.
19. Joe M. Morris. A general axiom of assignment. Assignment and linked data structure. A proof of the Schorr-Waite algorithm. In Theoretical Foundations of Programming Methodology, pages 25-51, 1982.
20. George C. Necula, Scott McPeak, Shree Prakash Rahul, and Westley Weimer. CIL: Intermediate language and tools for analysis and transformation of C programs. In Compiler Construction (CC), pages 213-228, 2002.
21. Greg Nelson and Derek C. Oppen. Simplification by cooperating decision procedures. ACM Trans. Program. Lang. Syst., 1(2):245-257, 1979.
22. Jens Palsberg and Todd Millstein. Type Systems: Advances and Applications. In The Compiler Design Handbook: Optimizations and Machine Code Generation, chapter 9. 2008.
23. Polyvios Pratikakis, Jeffrey S. Foster, and Michael W. Hicks. Locksmith: context-sensitive correlation analysis for race detection. In PLDI, pages 320-331, 2006.
24. Elnatan Reisner, Charles Song, Kin-Keung Ma, Jeffrey S. Foster, and Adam Porter. Using symbolic evaluation to understand behavior in configurable software systems. In International Conference on Software Engineering (ICSE), 2010. To appear.
25. Patrick M. Rondon, Ming Kawaguci, and Ranjit Jhala. Liquid types. In Programming Language Design and Implementation (PLDI), pages 159-169, 2008.
26. Patrick M. Rondon, Ming Kawaguchi, and Ranjit Jhala. Low-level liquid types. In Principles of Programming Languages (POPL), pages 131-144, 2010.
27. Koushik Sen, DarkoMarinov, and Gul Agha. CUTE: a concolic unit testing engine for C. In Foundations of Software Engineering (FSE), pages 263-272, 2005.
28. Hongwei Xi and Frank Pfenning. Dependent types in practical programming. In Principles of Programming Languages (POPL), pages 214-227, 1999.
29. Kwangkeun Yi and Williams Ludwell Harrison, III. Automatic generation and management of interprocedural program analyses. In Principles of Programming Languages (POPL), pages 246-259, 1993.