Evaluating the benefits of context-sensitive points-to analysis using a BDD-based implementation

Authors:
Ondřej Lhoták;Laurie Hendren
Affiliations:
University of Waterloo, Waterloo, ON, Canada;McGill University, Montreal, QC, Canada
Venue:
ACM Transactions on Software Engineering and Methodology (TOSEM)
Year:
2008

Citing 58
Cited 26

Control flow analysis in scheme

PLDI '88 Proceedings of the ACM SIGPLAN 1988 conference on Programming Language design and Implementation
Detecting equality of variables in programs

POPL '88 Proceedings of the 15th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Symbolic Boolean manipulation with ordered binary-decision diagrams

ACM Computing Surveys (CSUR)
Interprocedural modification side effect analysis with pointer aliasing

PLDI '93 Proceedings of the ACM SIGPLAN 1993 conference on Programming language design and implementation
Context-sensitive interprocedural points-to analysis in the presence of function pointers

PLDI '94 Proceedings of the ACM SIGPLAN 1994 conference on Programming language design and implementation
Design patterns: elements of reusable object-oriented software

Design patterns: elements of reusable object-oriented software
Efficient context-sensitive pointer analysis for C programs

PLDI '95 Proceedings of the ACM SIGPLAN 1995 conference on Programming language design and implementation
Context-insensitive alias analysis reconsidered

PLDI '95 Proceedings of the ACM SIGPLAN 1995 conference on Programming language design and implementation
Simple and effective analysis of statically-typed object-oriented programs

Proceedings of the 11th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Fast static analysis of C++ virtual function calls

Proceedings of the 11th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Points-to analysis in almost linear time

POPL '96 Proceedings of the 23rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Partial online cycle elimination in inclusion constraint graphs

PLDI '98 Proceedings of the ACM SIGPLAN 1998 conference on Programming language design and implementation
Using static single assignment form to improve flow-insensitive pointer analysis

PLDI '98 Proceedings of the ACM SIGPLAN 1998 conference on Programming language design and implementation
Advanced compiler design and implementation

Advanced compiler design and implementation
Efficient points-to analysis for whole-program analysis

ESEC/FSE-7 Proceedings of the 7th European software engineering conference held jointly with the 7th ACM SIGSOFT international symposium on Foundations of software engineering
Compositional pointer and escape analysis for Java programs

Proceedings of the 14th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Efficiency of a Good But Not Linear Set Union Algorithm

Journal of the ACM (JACM)
Interprocedural pointer alias analysis

ACM Transactions on Programming Languages and Systems (TOPLAS)
Practical virtual method call resolution for Java

OOPSLA '00 Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Scalable propagation-based call graph construction algorithms

OOPSLA '00 Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
A relational model of data for large shared data banks

Communications of the ACM
Incrementalized pointer and escape analysis

Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation
Ultra-fast aliasing analysis using CLA: a million lines of C code in a second

Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation
Pointer analysis: haven't we solved this problem yet?

PASTE '01 Proceedings of the 2001 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Extending and evaluating flow-insenstitive and context-insensitive points-to analyses for Java

PASTE '01 Proceedings of the 2001 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Bebop: a path-sensitive interprocedural dataflow engine

PASTE '01 Proceedings of the 2001 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
A schema for interprocedural modification side-effect analysis with pointer aliasing

ACM Transactions on Programming Languages and Systems (TOPLAS)
Points-to analysis for Java using annotated constraints

OOPSLA '01 Proceedings of the 16th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
A framework for call graph construction algorithms

ACM Transactions on Programming Languages and Systems (TOPLAS)
Parametric shape analysis via 3-valued logic

ACM Transactions on Programming Languages and Systems (TOPLAS)
Java Virtual Machine Specification

Java Virtual Machine Specification
Parameterized object sensitivity for points-to and side-effect analyses for Java

ISSTA '02 Proceedings of the 2002 ACM SIGSOFT international symposium on Software testing and analysis
Data Flow Analysis for Software Prefetching Linked Data Structures in Java

Proceedings of the 2001 International Conference on Parallel Architectures and Compilation Techniques
Optimization of Object-Oriented Programs Using Static Class Hierarchy Analysis

ECOOP '95 Proceedings of the 9th European Conference on Object-Oriented Programming
The Cartesian Product Algorithm: Simple and Precise Type Inference Of Parametric Polymorphism

ECOOP '95 Proceedings of the 9th European Conference on Object-Oriented Programming
Precise Constraint-Based Type Inference for Java

ECOOP '01 Proceedings of the 15th European Conference on Object-Oriented Programming
Compactly Representing First-Order Structures for Static Analysis

SAS '02 Proceedings of the 9th International Symposium on Static Analysis
Polymorphic versus Monomorphic Flow-Insensitive Points-to Analysis for C

SAS '00 Proceedings of the 7th International Symposium on Static Analysis
An Efficient Inclusion-Based Points-To Analysis for Strictly-Typed Languages

SAS '02 Proceedings of the 9th International Symposium on Static Analysis
A Toolkit for Constructing Type- and Constraint-Based Program Analyses

TIC '98 Proceedings of the Second International Workshop on Types in Compilation
Symbolic pointer analysis

Proceedings of the 2002 IEEE/ACM international conference on Computer-aided design
Points-to analysis using BDDs

PLDI '03 Proceedings of the ACM SIGPLAN 2003 conference on Programming language design and implementation
Dynamic metrics for java

OOPSLA '03 Proceedings of the 18th annual ACM SIGPLAN conference on Object-oriented programing, systems, languages, and applications
Incremental execution of transformation specifications

Proceedings of the 31st ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Precise and practical flow analysis of object-oriented software

Precise and practical flow analysis of object-oriented software
Efficient field-sensitive pointer analysis for C

Proceedings of the 5th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Importance of heap specialization in pointer analysis

Proceedings of the 5th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Cloning-based context-sensitive pointer alias analysis using binary decision diagrams

Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation
Symbolic pointer analysis revisited

Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation
Jedd: a BDD-based relational extension of Java

Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation
Parameterized object sensitivity for points-to analysis for Java

ACM Transactions on Software Engineering and Methodology (TOSEM)
Evaluating the impact of context-sensitivity on Andersen's algorithm for Java programs

PASTE '05 Proceedings of the 6th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Enforcing isolation and ordering in STM

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
A Technique for High-Performance Data Compression

Computer
Dimensions of precision in reference analysis of object-oriented programming languages

CC'03 Proceedings of the 12th international conference on Compiler construction
Polyglot: an extensible compiler framework for Java

CC'03 Proceedings of the 12th international conference on Compiler construction
Scaling Java points-to analysis using SPARK

CC'03 Proceedings of the 12th international conference on Compiler construction
Context-Sensitive points-to analysis: is it worth it?

CC'06 Proceedings of the 15th international conference on Compiler Construction

CPA beats ∞-CFA

Proceedings of the 11th International Workshop on Formal Techniques for Java-like Programs
Exception analysis and points-to analysis: better together

Proceedings of the eighteenth international symposium on Software testing and analysis
Strictly declarative specification of sophisticated points-to analyses

Proceedings of the 24th ACM SIGPLAN conference on Object oriented programming systems languages and applications
Breadcrumbs: efficient context sensitivity for dynamic bug detection analyses

PLDI '10 Proceedings of the 2010 ACM SIGPLAN conference on Programming language design and implementation
Resolving and exploiting the k-CFA paradox: illuminating functional vs. object-oriented program analysis

PLDI '10 Proceedings of the 2010 ACM SIGPLAN conference on Programming language design and implementation
Pick your contexts well: understanding object-sensitivity

Proceedings of the 38th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Learning minimal abstractions

Proceedings of the 38th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Sawja: static analysis workshop for java

FoVeOOS'10 Proceedings of the 2010 international conference on Formal verification of object-oriented software
Contribution-based call stack abstraction for call string based pointer analysis

Information and Software Technology
Scaling abstraction refinement via pruning

Proceedings of the 32nd ACM SIGPLAN conference on Programming language design and implementation
Geometric encoding: forging the high performance context sensitive points-to analysis for Java

Proceedings of the 2011 International Symposium on Software Testing and Analysis
Using datalog for fast and easy program analysis

Datalog'10 Proceedings of the First international conference on Datalog Reloaded
Programming paradigm driven heap analysis

CC'12 Proceedings of the 21st international conference on Compiler Construction
Static detection of brittle parameter typing

Proceedings of the 2012 International Symposium on Software Testing and Analysis
Application-Only call graph construction

ECOOP'12 Proceedings of the 26th European conference on Object-Oriented Programming
Layered fixed point logic

Proceedings of the 14th symposium on Principles and practice of declarative programming
Practical Integrated Analysis of Pointers, Dataflow and Control Flow

ACM Transactions on Programming Languages and Systems (TOPLAS)
Efficient and effective handling of exceptions in java points-to analysis

CC'13 Proceedings of the 22nd international conference on Compiler Construction
Hybrid context-sensitivity for points-to analysis

Proceedings of the 34th ACM SIGPLAN conference on Programming language design and implementation
Exploiting points-to maps for de-/serialization code generation

Proceedings of the 28th Annual ACM Symposium on Applied Computing
Variable and thread bounding for systematic testing of multithreaded programs

Proceedings of the 2013 International Symposium on Software Testing and Analysis
Interprocedural data flow analysis in Soot using value contexts

Proceedings of the 2nd ACM SIGPLAN International Workshop on State Of the Art in Java Program analysis
Sound and precise malware analysis for android via pushdown reachability and entry-point saturation

Proceedings of the Third ACM workshop on Security and privacy in smartphones & mobile devices
Modelling Access Propagation in Dynamic Systems

ACM Transactions on Information and System Security (TISSEC)
Averroes: whole-program analysis without the whole program

ECOOP'13 Proceedings of the 27th European conference on Object-Oriented Programming
Alias analysis for object-oriented programs

Aliasing in Object-Oriented Programming

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present Paddle, a framework of BDD-based context-sensitive points-to and call graph analyses for Java, as well as client analyses that use their results. Paddle supports several variations of context-sensitive analyses, including call site strings and object sensitivity, and context-sensitively specializes both pointer variables and the heap abstraction. We empirically evaluate the precision of these context-sensitive analyses on significant Java programs. We find that that object-sensitive analyses are more precise than comparable variations of the other approaches, and that specializing the heap abstraction improves precision more than extending the length of context strings.