Recency-Abstraction for heap-allocated storage

Authors:
Gogul Balakrishnan;Thomas Reps
Affiliations:
Comp. Sci. Dept., University of Wisconsin;Comp. Sci. Dept., University of Wisconsin
Venue:
SAS'06 Proceedings of the 13th international conference on Static Analysis
Year:
2006

Citing 30
Cited 27

Detecting conflicts between structure accesses

PLDI '88 Proceedings of the ACM SIGPLAN 1988 conference on Programming Language design and Implementation
Dependence analysis for pointer variables

PLDI '89 Proceedings of the ACM SIGPLAN 1989 Conference on Programming language design and implementation
Analysis of pointers and structures

PLDI '90 Proceedings of the ACM SIGPLAN 1990 conference on Programming language design and implementation
Binding-time analysis and the taming of C pointers

PEPM '93 Proceedings of the 1993 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation
A lattice for abstract interpretation of dynamic (LISP-like) structures

Information and Computation
Reducing indirect function call overhead in C++ programs

POPL '94 Proceedings of the 21st ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Dyn-FO (preliminary version): a parallel, dynamic complexity class

PODS '94 Proceedings of the thirteenth ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems
Fast static analysis of C++ virtual function calls

Proceedings of the 11th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Points-to analysis in almost linear time

POPL '96 Proceedings of the 23rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Solving shape-analysis problems in languages with destructive updating

ACM Transactions on Programming Languages and Systems (TOPLAS)
Putting static analysis to work for verification: A case study

Proceedings of the 2000 ACM SIGSOFT international symposium on Software testing and analysis
Unification-based pointer analysis with directional assignments

PLDI '00 Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation
Modular interprocedural pointer analysis using access paths: design, implementation, and evaluation

PLDI '00 Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation
Scalable context-sensitive flow analysis using instantiation constraints

PLDI '00 Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation
Practical virtual method call resolution for Java

OOPSLA '00 Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
Parametric shape analysis via 3-valued logic

ACM Transactions on Programming Languages and Systems (TOPLAS)
A flexible approach to interprocedural data flow analysis and programs with recursive data structures

POPL '82 Proceedings of the 9th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
MOPS: an infrastructure for examining security properties of software

Proceedings of the 9th ACM conference on Computer and communications security
Optimization of Object-Oriented Programs Using Static Class Hierarchy Analysis

ECOOP '95 Proceedings of the 9th European Conference on Object-Oriented Programming
Data-Flow-Based Virtual Function Resolution

SAS '96 Proceedings of the Third International Symposium on Static Analysis
Assessing the Effects of Flow-Sensitivity on Pointer Alias Analyses

SAS '98 Proceedings of the 5th International Symposium on Static Analysis
Polymorphic versus Monomorphic Flow-Insensitive Points-to Analysis for C

SAS '00 Proceedings of the 7th International Symposium on Static Analysis
Automated Verification of Concurrent Linked Lists with Counters

SAS '02 Proceedings of the 9th International Symposium on Static Analysis
Cloning-based context-sensitive pointer alias analysis using binary decision diagrams

Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation
Region-based shape analysis with tracked locations

Proceedings of the 32nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A framework for numeric analysis of array operations

Proceedings of the 32nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Parameterized object sensitivity for points-to analysis for Java

ACM Transactions on Software Engineering and Methodology (TOSEM)
Practical and Accurate Low-Level Pointer Analysis

Proceedings of the international symposium on Code generation and optimization
Intermediate-representation recovery from low-level code

Proceedings of the 2006 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation
Checking system rules using system-specific, programmer-written compiler extensions

OSDI'00 Proceedings of the 4th conference on Symposium on Operating System Design & Implementation - Volume 4

Finding Concurrency-Related Bugs Using Random Isolation

VMCAI '09 Proceedings of the 10th International Conference on Verification, Model Checking, and Abstract Interpretation
A Posteriori Soundness for Non-deterministic Abstract Interpretations

VMCAI '09 Proceedings of the 10th International Conference on Verification, Model Checking, and Abstract Interpretation
Type Analysis for JavaScript

SAS '09 Proceedings of the 16th International Symposium on Static Analysis
WYSINWYX: What you see is not what you eXecute

ACM Transactions on Programming Languages and Systems (TOPLAS)
DIVINE: discovering variables in executables

VMCAI'07 Proceedings of the 8th international conference on Verification, model checking, and abstract interpretation
A static birthmark of binary executables based on API call structure

ASIAN'07 Proceedings of the 12th Asian computing science conference on Advances in computer science: computer and network security
Improved memory-access analysis for x86 executables

CC'08/ETAPS'08 Proceedings of the Joint European Conferences on Theory and Practice of Software 17th international conference on Compiler construction
A dynamic evaluation of the precision of static heap abstractions

Proceedings of the ACM international conference on Object oriented programming systems languages and applications
Interprocedural analysis with lazy propagation

SAS'10 Proceedings of the 17th international conference on Static analysis
Recency types for analyzing scripting languages

ECOOP'10 Proceedings of the 24th European conference on Object-oriented programming
Symbolic object code analysis

SPIN'10 Proceedings of the 17th international SPIN conference on Model checking software
TypeCastor: demystify dynamic typing of JavaScript applications

Proceedings of the 6th International Conference on High Performance and Embedded Architectures and Compilers
Interprocedural control flow reconstruction

APLAS'10 Proceedings of the 8th Asian conference on Programming languages and systems
Precise static analysis of untrusted driver binaries

Proceedings of the 2010 Conference on Formal Methods in Computer-Aided Design
Statically-directed dynamic automated test generation

Proceedings of the 2011 International Symposium on Software Testing and Analysis
Modeling the HTML DOM and browser API in static analysis of JavaScript web applications

Proceedings of the 19th ACM SIGSOFT symposium and the 13th European conference on Foundations of software engineering
Side-effect analysis of assembly code

SAS'11 Proceedings of the 18th international conference on Static analysis
Family of abstract interpretations for static analysis of concurrent higher-order programs

SAS'11 Proceedings of the 18th international conference on Static analysis
Beyond reachability: shape abstraction in the presence of pointer arithmetic

SAS'06 Proceedings of the 13th international conference on Static Analysis
Shape analysis in the absence of pointers and structure

VMCAI'10 Proceedings of the 11th international conference on Verification, Model Checking, and Abstract Interpretation
There's plenty of room at the bottom: analyzing and verifying machine code

CAV'10 Proceedings of the 22nd international conference on Computer Aided Verification
Correlation tracking for points-to analysis of javascript

ECOOP'12 Proceedings of the 26th European conference on Object-Oriented Programming
Static detection of loop-invariant data structures

ECOOP'12 Proceedings of the 26th European conference on Object-Oriented Programming
FESA: fold- and expand-based shape analysis

CC'13 Proceedings of the 22nd international conference on Compiler Construction
Type refinement for static analysis of JavaScript

Proceedings of the 9th symposium on Dynamic languages
LeakChecker: Practical Static Memory Leak Detection for Managed Languages

Proceedings of Annual IEEE/ACM International Symposium on Code Generation and Optimization
Alias analysis for object-oriented programs

Aliasing in Object-Oriented Programming

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present an abstraction for heap-allocated storage, called the recency-abstraction, that allows abstract-interpretation algorithms to recover some non-trivial information for heap-allocated data objects. As an application of the recency-abstraction, we show how it can resolve virtual-function calls in stripped executables (i.e., executables from which debugging information has been removed). This approach succeeded in resolving 55% of virtual-function call-sites, whereas previous tools for analyzing executables fail to resolve any of the virtual-function call-sites.