Scalable shape analysis for systems code (2008)
Cached
Download Links
- [www.doc.ic.ac.uk]
- [www.dcs.qmul.ac.uk]
- [www.eecs.qmul.ac.uk]
- [research.microsoft.com]
- [research.microsoft.com]
- [www.research.microsoft.com]
- [www.research.microsoft.com]
- [www.research.microsoft.com]
- [www.research.microsoft.com]
- [research.microsoft.com]
- [research.microsoft.com]
- [research.microsoft.com]
- [www.research.microsoft.com]
- [research.microsoft.com]
- DBLP
Other Repositories/Bibliography
| Venue: | In CAV |
| Citations: | 61 - 9 self |
BibTeX
@INPROCEEDINGS{Yang08scalableshape,
author = {Hongseok Yang and Oukseh Lee and Josh Berdine and Cristiano Calcagno and Byron Cook and Dino Distefano},
title = {Scalable shape analysis for systems code},
booktitle = {In CAV},
year = {2008}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Abstract. Pointer safety faults in device drivers are one of the leading causes of crashes in operating systems code. In principle, shape analysis tools can be used to prove the absence of this type of error. In practice, however, shape analysis is not used due to the unacceptable mixture of scalability and precision provided by existing tools. In this paper we report on a new join operation ⊔ † for the separation domain which aggressively abstracts information for scalability yet does not lead to false error reports. ⊔ † is a critical piece of a new shape analysis tool that provides an acceptable mixture of scalability and precision for industrial application. Experiments on whole Windows and Linux device drivers (firewire, pcidriver, cdrom, md, etc.) represent the first working application of shape analysis to verification of whole industrial programs. 1
