Concrete Memory Models for Shape Analysis

Authors:
Pascal Sotin;Bertrand Jeannet;Xavier Rival
Affiliations:
INRIA Grenoble - Rhône-Alpes, 655 avenue de l'Europe, 38 334 Saint Ismier Cedex, France;INRIA Grenoble - Rhône-Alpes, 655 avenue de l'Europe, 38 334 Saint Ismier Cedex, France;INRIA Rocquencourt and DI - Ecole Normale Supérieure, 45, rue d'Ulm, 75230 Paris Cedex 05 - France
Venue:
Electronic Notes in Theoretical Computer Science (ENTCS)
Year:
2010

Citing 8
Cited 0

Parametric shape analysis via 3-valued logic

ACM Transactions on Programming Languages and Systems (TOPLAS)
Separation Logic: A Logic for Shared Mutable Data Structures

LICS '02 Proceedings of the 17th Annual IEEE Symposium on Logic in Computer Science
Field-sensitive value analysis of embedded C programs with union types and pointer arithmetics

Proceedings of the 2006 ACM SIGPLAN/SIGBED conference on Language, compilers, and tool support for embedded systems
Relational inductive shape analysis

Proceedings of the 35th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Space Invading Systems Code

Logic-Based Program Synthesis and Transformation
Beyond reachability: shape abstraction in the presence of pointer arithmetic

SAS'06 Proceedings of the 13th international conference on Static Analysis
Shape analysis of low-level c with overlapping structures

VMCAI'10 Proceedings of the 11th international conference on Verification, Model Checking, and Abstract Interpretation
Separating shape graphs

ESOP'10 Proceedings of the 19th European conference on Programming Languages and Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper discusses four store-based concrete memory models. We characterize memory models by the class of pointers they support and whether they use numerical or symbolic offsets to address values in a block. We give the semantics of a C-like language within each of these memory models to illustrate their differences. The language we consider is a fragment of Leroy's Clight, including arrays, pointer arithmetics but excluding casts. All along the paper, we link these concrete memory models with existing shape analyses.