Cross-checking semantic correctness: The case of finding file system bugs

SOSP 2015 - Proceedings of the 25th ACM Symposium on Operating Systems Principles

Volumn , Issue , 2015, Pages 361-377

  Min, Changwoo ^a   Kashyap, Sanidhya ^a   Lee, Byoungyoung ^a   Song, Chengyu ^a   Kim, Taesoo ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); COMPLEX NETWORKS; COMPUTER OPERATING SYSTEMS; COMPUTER PROGRAMMING; COMPUTER SOFTWARE; FILE ORGANIZATION; INTERNET PROTOCOLS; LARGE SCALE SYSTEMS; LINUX; NETWORK LAYERS; SEMANTICS; WEB BROWSERS;

BUG-FREE; FILE SYSTEMS; HIGH LEVEL SEMANTICS; HIGH-LEVEL RULES; LINUX KERNEL; NETWORK STACK; SOURCE CODES; SYSTEMS SOFTWARE;

PROGRAM DEBUGGING;

EID: 84958012396     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2815400.2815422     Document Type: Conference Paper

References (69)

1. Skipped files with -listed-incremental after rename, 2003. http://osdir.com/ml/gnu.tar.bugs/2003-10/msg00013.html.
2. Fix update of mtime and ctime on rename, 2008. http://linux-ext4.vger.kernel.narkive.com/Cc13bI74/patch-ext3-fix-update-of-mtime-and-ctime-on-rename.
3. mkdi(), 2013. The IEEE and The Open Group, The Open Group Base Specifications Issue 7, IEEE Std 1003.1, 2013 Edition http://pubs.opengroup.org/onlinepubs/9699919799/functions/mkdir.html.
4. Checker developer manual, 2015. http://clang-analyzer.llvm.org/checker-dev-manual.html#idea.
5. ASHCRAFT, K., and ENGLER, D. Using programmer-written compiler extensions to catch security holes. In Proceedings of the 23rd IEEE Symposium on Security and Privacy (Oakland) (Oakland, CA, May 2002), pp. 143-160.
6. AVIZIENIS, A. The N-Version approach to fault-tolerant software. IEEE Transactions of Software Engineering 11, 12 (Dec. 1985), 1491-1501.
7. BALL, T., BOUNIMOVA, E., COOK, B., LEVIN, V., LICHTENBERG, J., MCGARVEY, C., ONDRUSEK, B., and RAJAMANI, S. K., and USTUNER, A. Thorough static analysis of device drivers. In Proceedings of the ACM EuroSys Conference (Leuven, Belgium, Apr. 2006), pp. 73-85.
8. BESSEY, A., BLOCK, K., CHELF, B., CHOU, A., FULTON, B., HALLEM, S., HENRI-GROS, C., KAMSKY, A., MCPEAK, S., and ENGLER, D. A few billion lines of code later: Using static analysis to find bugs in the real world. Communications of the ACM 53, 2 (Feb. 2010), 66-75.
9. BRUMLEY, D., CABALLERO, J., LIANG, Z., NEWSOME, J., and SONG, D. Towards automatic discovery of deviations in binary implementations with applications to error detection and fingerprint generation. In Proceedings of the 16th Usenix Security Symposium (Security) (Boston, MA, Aug. 2007), pp. 15:1-15:16.
10. BRUMLEY, D., WANG, H., JHA, S., and SONG, D. Creating vulnerability signatures using weakest preconditions. In Proceedings of the 20th IEEE Computer Security Foundations Symposium (Washington, DC, USA, 2007), CSF '07, IEEE Computer Society, pp. 311-325.
11. BRUMMAYER, R., and BIERE, A. Boolector: An efficient SMT solver for bit-vectors and arrays. In Tools and Algorithms for the Construction and Analysis of Systems. Springer, 2009, pp. 174-177.
12. BUCUR, S., URECHE, V., ZAMFIR, C., and CANDEA, G. Parallel symbolic execution for automated real-world software testing. In Proceedings of the ACM EuroSys Conference (Salzburg, Austria, Apr. 2011), pp. 183-198.
13. CADAR, C., DUNBAR, D., and ENGLER, D. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proceedings of the 8th Symposium on Operating Systems Design and Implementation (OSDI) (San Diego, CA, Dec. 2008), pp. 209-224.
14. CADAR, C., GANESH, V., PAWLOWSKI, P. M., and DILL, D. L., and ENGLER, D. R. EXE: Automatically generating inputs of death. In Proceedings of the 13th ACM Conference on Computer and Communications Security (Alexandria, VA, Oct.-Nov. 2006), pp. 322-335.
15. CHEN, H., CUTLER, C., KIM, T., MAO, Y., WANG, X., ZELDOVICH, N., and KAASHOEK, M. F. Security bugs in embedded interpreters. In Proceedings of the 4th Asia-Pacific Workshop on Systems (APSys) (2013), pp. 17:1-17:7.
16. CHEN, H., ZIEGLER, D., CHLIPALA, A., KAASHOEK, M. F., KOHLER, E., and ZELDOVICH, N. Towards certified storage systems. In Proceedings of the 15th Workshop on Hot Topics in Operating Systems (HotOS) (May 2015).
17. CHOU, A., YANG, J., CHELF, B., HALLEM, S., and ENGLER, D. An empirical study of operating systems errors. In Proceedings of the 18th ACM Symposium on Operating Systems Principles (SOSP) (Chateau Lake Louise, Banff, Canada, Oct. 2001), pp. 73-88.
18. CORBET, J., KROAH-HARTMAN, G., and MCPHERSON, A. Linux Kernel Development: How Fast is it Going, Who is Doing It, What Are They Doing and Who is Sponsoring the Work, 2015. http://www.linuxfoundation.org/publications/linux-foundation/who-writes-linux-2015.
19. CORBETT, J. C., and DWYER, M. B., HATCLIFF, J., LAUBACH, S., PASAREANU, C. S., and ZHENG, H. Bandera: Extracting finite-state models from Java source code. In Proceedings of the 22nd international conference on software engineering (ICSE) (2000), pp. 439-448.
20. CUI, H., HU, G., WU, J., and YANG, J. Verifying systems rules using rule-directed symbolic execution. In Proceedings of the 18th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) (Houston, TX, Mar. 2013), pp. 329-342.
21. DAS, M., LERNER, S., and SEIGLE, M. ESP: Path-sensitive program verification in polynomial time. In Proceedings of the 2002 ACM SIGPLAN Conference on Programming Language Design and Implementation (Berlin, Germany, June 2002), pp. 57-68.
22. DE MOURA, L., AND BJØRNER, N. Z3: An efficient SMT solver. In Tools and Algorithms for the Construction and Analysis of Systems. Springer, 2008, pp. 337-340.
23. DIJKSTRA, E. W. A discipline of programming, vol. 1. Prentice-Hall Englewood Cliffs, 1976.
24. DILLIG, I., DILLIG, T., and AIKEN, A. Static error detection using semantic inconsistency inference. In Proceedings of the 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation (San Diego, CA, June 2007), pp. 435-445.
25. DITTMER, M. S., and TRIPUNITARA, M. V. The UNIX process identity crisis: A standards-driven approach to setuid. In Proceedings of the 21st ACM Conference on Computer and Communications Security (Scottsdale, Arizona, Nov. 2014), pp. 1391-1402.
26. DUDA, R. O., and HART, P. E., and STORK, D. G. Pattern classification. John Wiley & Sons, 2012.
27. ECMA INTERNATIONAL. ECMAScript Language Specification, June 2011. http://www.ecmascript.org/docs.php.
28. ENGLER, D., CHELF, B., CHOU, A., and HALLEM, S. Checking system rules using system-specific, programmerwritten compiler extensions. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation (OSDI) (San Diego, CA, Oct. 2000).
29. ENGLER, D., and CHEN, D. Y., HALLEM, S., CHOU, A., and CHELF, B. Bugs as deviant behavior: A general approach to inferring errors in systems code. In Proceedings of the 18th ACM Symposium on Operating Systems Principles (SOSP) (Chateau Lake Louise, Banff, Canada, Oct. 2001), pp. 57-72.
30. FRYER, D., SUN, K., MAHMOOD, R., CHENG, T., BENJAMIN, S., GOEL, A., and BROWN, A. D. Recon: Verifying file system consistency at runtime. In Proceedings of the 10th USENIX Conference on File and Storage Technologies (FAST) (2012).
31. GOOCH, R. Overview of the linux virtual file system, 2007. https://www.kernel.org/doc/Documentation/filesystems/vfs.txt.
32. GUNAWI, H. S., RUBIO-GONZÁLEZ, C., ARPACI-DUSSEAU, A. C., ARPACI-DUSSEA, R. H., AND LIBLIT, B. EIO: Error handling is occasionally correct. In Proceedings of the 6th USENIX Conference on File and Storage Technologies (FAST) (2008), pp. 14:1-14:16.
33. GUO, H., WU, M., ZHOU, L., HU, G., YANG, J., and ZHANG, L. Practical software model checking via dynamic interface reduction. In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP) (Cascais, Portugal, Oct. 2011), pp. 265-278.
34. HUNT, G. C., and LARUS, J. R. Singularity: Rethinking the Software Stack. ACM SIGOPS Operating Systems Review 41, 2 (April 2007), 37-49.
35. JANG, D., TATLOCK, Z., and LERNER, S. Establishing browser security guarantees through formal shim verification. In Proceedings of the 21st Usenix Security Symposium (Security) (Bellevue, WA, Aug. 2012), pp. 113-128.
36. KARA, J. fs/udf/namei.c at v4.1, 2015. https://github.com/torvalds/linux/commit/3adc12e9648291149a1e3f354d0ad158fc2571e7.
37. KIM, T., CHANDRA, R., and ZELDOVICH, N. Efficient patch-based auditing for web application vulnerabilities. In Proceedings of the 10th Symposium on Operating Systems Design and Implementation (OSDI) (Hollywood, CA, Oct. 2012).
38. KLEIN, G., ELPHINSTONE, K., HEISER, G., ANDRONICK, J., COCK, D., DERRIN, P., ELKADUWE, D., ENGELHARDT, K., KOLANSKI, R., NORRISH, M., SEWELL, T., TUCH, H., and WINWOOD, S. seL4: Formal verification of an os kernel. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP) (Big Sky, MT, Oct. 2009), pp. 207-220.
39. KULLBACK, S., and LEIBLER, R. A. On information and sufficiency. The annals of mathematical statistics (1951), 79-86.
40. LEROY, X. Formal certification of a compiler back-end or: Programming a compiler with a proof assistant. In Proceedings of the 33rd ACM Symposium on Principles of Programming Languages (Charleston, South Carolina, Jan. 2006), pp. 42-54.
41. LI, Z., LU, S., MYAGMAR, S., and ZHOU, Y. CP-Miner: A tool for finding copy-paste and related bugs in operating system code. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI) (San Francisco, CA, Dec. 2004).
42. LU, L., ARPACI-DUSSEAU, A. C., ARPACI-DUSSEAU, R. H., AND LU, S. A study of Linux file system evolution. In Proceedings of the 11th USENIX Conference on File and Storage Technologies (FAST) (2013), pp. 31-44.
43. MADHAVAPEDDY, A., MORTIER, R., ROTSOS, C., SCOTT, D., SINGH, B., GAZAGNAIRE, T., SMITH, S., HAND, S., and CROWCROFT, J. Unikernels: Library operating systems for the cloud. In Proceedings of the 18th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) (Houston, TX, Mar. 2013), pp. 461-472.
44. MUSUVATHI, M. S., PARK, D., PARK, D. Y. W., CHOU, A., ENGLER, D. R., and DILL, D. L. CMC: A pragmatic approach to model checking real code. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI) (Boston, MA, Dec. 2002).
45. PALIX, N., THOMAS, G., SAHA, S., CALVÈS, C., LAWALL, J., and MULLER, G. Faults in Linux: Ten years later. In Proceedings of the 16th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) (Newport Beach, CA, Mar. 2011), pp. 305-318.
46. PATOCKA, M. [Patch] hpfs: update ctime and mtime on directory modification, 2015. https://lkml.org/lkml/2015/9/2/552.
47. RUBIO-GONZÁLEZ, C., GUNAWI, H. S., LIBLIT, B., ARPACI-DUSSEAU, R. H., AND ARPACI-DUSSEAU, A. C. Error propagation analysis for file systems. In Proceedings of the 2009 ACM SIGPLAN Conference on Programming Language Design and Implementation (Dublin, Ireland, June 2009), pp. 270-280.
48. RUBNER, Y., TOMASI, C., and GUIBAS, L. J. The earth mover's distance as a metric for image retrieval. International journal of computer vision 40, 2 (2000), 99-121.
49. RYZHYK, L., CHUBB, P., KUZ, I., LE SUEUR, E., and HEISER, G. Automatic device driver synthesis with Termite. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP) (Big Sky, MT, Oct. 2009), pp. 73-86.
50. SAVAGE, S., BURROWS, M., NELSON, G., SOBALVARRO, P., and ANDERSON, T. Eraser: A dynamic data race detector for multi-threaded programs. In Proceedings of the Sixteenth ACM Symposium on Operating Systems Principles (Saint-Malo, France, Oct. 1997), pp. 27-37.
51. SEREBRYANY, K., BRUENING, D., POTAPENKO, A., and VYUKOV, D. AddressSanitizer: A Fast Address Sanity Checker. In Proceedings of the 2012 ATC Annual Technical Conference (ATC) (Boston, MA, June 2012), pp. 309-318.
52. SHANNON, C. E. A mathematical theory of communication. Bell system technical journal 27 (1948).
53. SWAIN, M. J., and BALLARD, D. H. Color indexing. International journal of computer vision 7, 1 (1991), 11-32.
54. THE IEEE and THE OPEN GROUP. fsync(), 2013. The Open Group Base Specifications Issue 7, IEEE Std 1003.1, 2013 Edition, http://pubs.opengroup.org/onlinepubs/9699919799/functions/fsync.html.
55. THE IEEE and THE OPEN GROUP. rename(), 2013. The Open Group Base Specifications Issue 7, IEEE Std 1003.1, 2013 Edition, http://pubs.opengroup.org/onlinepubs/9699919799/functions/rename.html.
56. THE LINUX PROGRAMMING INTERFACE. fync(), 2014. Linux's Programmer's Manual, http://man7.org/linux/man-pages/man2/fsync.2.html.
57. THE WORLD WIDE WEB CONSORTIUM (W3C). Document Object Model (DOM) Level 2 HTML Specification, Jan. 2003. http://www.w3.org/TR/DOM-Level-2-HTML/Overview.html.
58. TORVALDS, L. fs/ubifs/file.c at v4.0-rc2, 2015. https://github.com/torvalds/linux/blob/v4.0-rc2/fs/ubifs/file.c#L1321.
59. TORVALDS, L. inlucde/linux/fs.h at v4.0-rc2, 2015. https://github.com/torvalds/linux/blob/v4.0-rc2/include/linux/fs.h#L1688.
60. WANG, X., CHEN, H., JIA, Z., ZELDOVICH, N., and KAASHOEK, M. F. Improving integer security for systems with KINT. In Proceedings of the 10th Symposium on Operating Systems Design and Implementation (OSDI) (Hollywood, CA, Oct. 2012), pp. 163-177.
61. WANG, X., LAZAR, D., ZELDOVICH, N., CHLIPALA, A., and TATLOCK, Z. Jitk: A trustworthy in-kernel interpreter infrastructure. In Proceedings of the 11th Symposium on Operating Systems Design and Implementation (OSDI) (Broomfield, Colorado, Oct. 2014), pp. 33-47.
62. WANG, X., ZELDOVICH, N., KAASHOEK, M. F., and SOLAR-LEZAMA, A. Towards optimization-safe systems: Analyzing the impact of undefined behavior. In Proceedings of the 24th ACM Symposium on Operating Systems Principles (SOSP) (Farmington, PA, Nov. 2013), pp. 260-275.
63. YAMAGUCHI, F., GOLDE, N., ARP, D., and RIECK, K. Modeling and discovering vulnerabilities with code property graphs. In Proceedings of the 35th IEEE Symposium on Security and Privacy (Oakland) (San Jose, CA, May 2014), pp. 590-604.
64. YANG, J., SAR, C., and ENGLER, D. explode: A lightweight, general system for finding serious storage system errors. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI) (Seattle, WA, Nov. 2006), pp. 10-10.
65. YANG, J., SAR, C., TWOHEY, P., CADAR, C., and ENGLER, D. Automatically generating malicious disks using symbolic execution. In Proceedings of the 27th IEEE Symposium on Security and Privacy (Oakland) (Oakland, CA, May 2006), pp. 243-257.
66. YANG, J., TWOHEY, P., AND DAWSON. Using model checking to find serious file system errors. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI) (San Francisco, CA, Dec. 2004), pp. 273-288.
67. YIN, Z., MA, X., ZHENG, J., ZHOU, Y., and BAIRAVASUNDARAM, L. N., and PASUPATHY, S. An empirical study on configuration errors in commercial and open source systems. In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP) (Cascais, Portugal, Oct. 2011), pp. 159-172.
68. YOSHIMURA, T., and KONO, K. Who writes what checkers?-learning from bug repositories. In Proceedings of the 10th Workshop on Hot Topics in System Dependability (Hot-Dep) (Broomfield, CO, Oct. 2014).
69. YUAN, D., LUO, Y., ZHUANG, X., RODRIGUES, G. R., ZHAO, X., ZHANG, Y., JAIN, P. U., and STUMM, M. Simple testing can prevent most critical failures: An analysis of production failures in distributed data-intensive systems. In Proceedings of the 11th Symposium on Operating Systems Design and Implementation (OSDI) (Broomfield, Colorado, Oct. 2014), pp. 249-265.