We propose a novel fine-grained integration of pointer analysis with
dynamic analysis, including dynamic symbolic execution. This is
achieved via past-sensitive pointer analysis, an on-demand
pointer analysis instantiated with an abstraction of the dynamic
state on which it is invoked.
We evaluate our technique in three application scenarios: chopped
symbolic execution, symbolic pointer resolution, and
write integrity testing.
Our preliminary results show that the approach can have a significant
impact in these scenarios, by effectively improving the precision of
standard pointer analysis with only a modest performance overhead.
Conference DayThu 12 NovDisplayed time zone: (UTC) Coordinated Universal Time change
08:30 - 09:00
|Domain-Independent Interprocedural Program Analysis using Block-Abstraction Memoization|
Research PapersDOI Pre-print Media Attached
|Inherent Vacuity for GR(1) Specifications|
|Interval Counterexamples for Loop Invariant Learning|
|Modular Collaborative Program Analysis in OPAL|
Dominik HelmTU Darmstadt, Germany, Florian KüblerTU Darmstadt, Germany, Michael ReifTU Darmstadt, Germany, Michael EichbergTU Darmstadt, Germany, Mira MeziniTU Darmstadt, GermanyDOI
|Past-Sensitive Pointer Analysis for Symbolic Execution|
David TrabishTel Aviv University, Israel, Timotej KapusImperial College London, UK, Noam RinetzkyTel Aviv University, Cristian CadarImperial College London, UKDOI Pre-print Media Attached
|Conversations on Analysis 4|