Field-Sensitive Value Analysis of Embedded C Programs with Union Types and Pointer Arithmetics (2006)
| Citations: | 25 - 5 self |
BibTeX
@MISC{Miné06field-sensitivevalue,
author = {Antoine Miné},
title = {Field-Sensitive Value Analysis of Embedded C Programs with Union Types and Pointer Arithmetics},
year = {2006}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
We propose a memory abstraction able to lift existing numerical static analyses to C programs containing union types, pointer casts, and arbitrary pointer arithmetics. Our framework is that of a combined points-to and data-value analysis. We abstract the contents of compound variables in a field-sensitive way, whether these fields contain numeric or pointer values, and use stock numerical abstract domains to find an overapproximation of all possible memory states--- with the ability to discover relationships between variables. A main novelty of our approach is the dynamic mapping scheme we use to associate a flat collection of abstract cells of scalar type to the set of accessed memory locations, while taking care of byte-level aliases---i.e., C variables with incompatible types allocated in overlapping memory locations. We do not rely on static type information which can be misleading in C programs as it does not account for all the uses a memory zone may be put to. Our work
