A Relational Shape Abstract Domain

Hugo Illous (1, 2) , Matthieu Lemerre (1) , Xavier Rival (2)

1 LSL - Laboratoire Sûreté des Logiciels
2 ANTIQUE - Analyse Statique par Interprétation Abstraite

Static analyses aim at inferring semantic properties of programs. While many analyses compute an over-approximation of reachable states, some analyses compute a description of the input-output relations of programs. In the case of numeric programs, several analyses have been proposed that utilize relational numerical abstract domains to describe relations. On the other hand, designing abstractions for relations over memory states and taking shapes into account is challenging. In this paper, we propose a set of novel logical connectives to describe such relations, which are inspired by separation logic. This logic can express that certain memory areas are unchanged, freshly allocated, or freed, or that only part of the memory was modified. Using these connectives, we build an abstract domain and design a static analysis that over-approximates relations over memory states containing inductive structures. We implement this analysis and report on the analysis of a basic library of list manipulating functions.

Domaines: Langage de programmation [cs.PL]

Hugo Illous, Matthieu Lemerre, Xavier Rival. A Relational Shape Abstract Domain. NFM 2017 - 9th NASA Formal Methods Symposium, Apr 2017, Moffett Field, United States. pp.212-229, ⟨10.1007/978-3-319-57288-8_15⟩. ⟨hal-01648681⟩