Citation Context

...ependent, they are difficult to catch using run-time testing techniques. A single synchronization error in an otherwise correct program may yield a race condition whose cause takes weeks to identify [=-=Savage et al. 1997-=-]. This paper investigates a static analysis system for detecting race conditions in Java programs. The analysis supports the lock-based synchronization discipline by associating a lock with each shar...

Citation Context

... of Flatt, Krishnamurthi, and Felleisen [Flatt et al. 1998] as the starting point for our study. There have been many suggested language extensions for supporting Java classes parameterized by types [=-=Odersky and Wadler 1997-=-; Bracha et al. 1998; Agesen et al. 1997; Myers et al. 1997; Cartwright and Jr. 1998]. Our work uses a different notion of parameterization, namely, classes parameterized by values (more specifically,...

Citation Context

...s that of GJ [Bracha et al. 1998], in that information about class parameters is not preserved at run time. The requires annotations used by rccjava are similar to effects [Jouvelot and Gifford 1991; =-=Lucassen and Gifford 1988-=-; Nielson 1996]. Thus, the analysis performed by Houdini/rcc includes a basic form of effect reconstruction [Tofte and Talpin 1994; 1997; Amtoft et al. 1997; Talpin and Jouvelot 1992], and the Houdini...

Citation Context

...i/rcc infers thread-local annotations for classes whose instances are never shared between threads. Other work on this escape-analysis problem [Choi et al. 1999; Blanchet 1999; Bogda and Hölzle 1999; =-=Whaley and Rinard 1999-=-; Aldrich et al. 1999] has primarily focused on optimizing synchronization operations. Because of its intended application, Houdini/rcc includes an interface that provides explanations. 9. CONCLUSIONS...

Citation Context

...e starting point for our study. There have been many suggested language extensions for supporting Java classes parameterized by types [Odersky and Wadler 1997; Bracha et al. 1998; Agesen et al. 1997; =-=Myers et al. 1997-=-; Cartwright and Jr. 1998]. Our work uses a different notion of parameterization, namely, classes parameterized by values (more specifically, lock expressions). Apart from this distinction, our class ...

Citation Context

...nd Gifford 1991; Lucassen and Gifford 1988; Nielson 1996]. Thus, the analysis performed by Houdini/rcc includes a basic form of effect reconstruction [Tofte and Talpin 1994; 1997; Amtoft et al. 1997; =-=Talpin and Jouvelot 1992-=-], and the Houdini/rcc interface provides an explanation of why certain effects were inferred. The Houdini/rcc algorithm can be viewed as an abstract interpretation [Cousot and Cousot 1977], where the...

Citation Context

... Month Year.s26 · Abadi et al. A number of formal calculi for Java have been presented in recent literature. These include attempts to model the entire Java language [Drossopoulou and Eisenbach 1997; =-=Syme 1997-=-; Nipkow and von Oheimb 1998] and, also, smaller systems designed to study specific features and extensions [Igarashi et al. 2001]. We chose to use the ClassicJava calculus of Flatt, Krishnamurthi, an...

Citation Context

...veloped for detecting race conditions, both statically and dynamically. We review many of them below. Several of these tools have been developed since the initial publication of our results. Warlock [=-=Sterling 1993-=-] is a static race-detection system for ANSI C programs. It supports the lock-based synchronization discipline through annotations similar to ours. However, Warlock uses a different analysis mechanism...

Citation Context

...s and Systems, Vol. TBD, No. TDB, Month Year.s26 · Abadi et al. A number of formal calculi for Java have been presented in recent literature. These include attempts to model the entire Java language [=-=Drossopoulou and Eisenbach 1997-=-; Syme 1997; Nipkow and von Oheimb 1998] and, also, smaller systems designed to study specific features and extensions [Igarashi et al. 2001]. We chose to use the ClassicJava calculus of Flatt, Krishn...

Citation Context

...sed by rccjava are similar to effects [Jouvelot and Gifford 1991; Lucassen and Gifford 1988; Nielson 1996]. Thus, the analysis performed by Houdini/rcc includes a basic form of effect reconstruction [=-=Tofte and Talpin 1994-=-; 1997; Amtoft et al. 1997; Talpin and Jouvelot 1992], and the Houdini/rcc interface provides an explanation of why certain effects were inferred. The Houdini/rcc algorithm can be viewed as an abstrac...

Citation Context

... 1998], in that information about class parameters is not preserved at run time. The requires annotations used by rccjava are similar to effects [Jouvelot and Gifford 1991; Lucassen and Gifford 1988; =-=Nielson 1996-=-]. Thus, the analysis performed by Houdini/rcc includes a basic form of effect reconstruction [Tofte and Talpin 1994; 1997; Amtoft et al. 1997; Talpin and Jouvelot 1992], and the Houdini/rcc interface...

Citation Context

...ool. It has been used to catch race conditions in several programs, including an X-windows library. The extended static checker for Java (ESC/Java) is a tool for static detection of software defects [=-=Leino et al. 1999-=-; Flanagan et al. 2002; Detlefs et al. 1998]. It uses an underlying automatic theorem prover to reason about program behavior and to verify the absence of certain kinds of errors, such as null derefer...

Citation Context

...these include model checking [Chamillard et al. 1996; Corbett 1996; Fajstrup et al. 1998; Yahav 2001], dataflow analysis [Dwyer and Clarke 1994], and type systems for process calculi [Kobayashi 1998; =-=Kobayashi et al. 2000-=-]. ACM Transactions on Programming Languages and Systems, Vol. TBD, No. TDB, Month Year.s26 · Abadi et al. A number of formal calculi for Java have been presented in recent literature. These include a...

Citation Context

...nized increments of global performance counters, where any resulting race conditions will not cause the resulting count to be substantially incorrect, and patterns like double-checked initialization [=-=Schmidt and Harrison 1997-=-], among others. Figure 6 contains an excerpt from java.util.Vector that illustrates a typical race condition caught during our experiments. Suppose that there are two threads manipulating a shared Ve...

Citation Context

... effects [Jouvelot and Gifford 1991; Lucassen and Gifford 1988; Nielson 1996]. Thus, the analysis performed by Houdini/rcc includes a basic form of effect reconstruction [Tofte and Talpin 1994; 1997; =-=Amtoft et al. 1997-=-; Talpin and Jouvelot 1992], and the Houdini/rcc interface provides an explanation of why certain effects were inferred. The Houdini/rcc algorithm can be viewed as an abstract interpretation [Cousot a...

Citation Context

...ction 8, and we conclude in Section 9. The Appendix contains a formal definition of the type system and proofs. This paper is based on work presented in preliminary form at conferences and workshops [=-=Flanagan and Abadi 1999-=-b; 1999a; Flanagan and Freund 2000; 2001]. Some of that work focused on lambda calculi and object calculi (rather than Java), and some relied on type constructions not considered here (for example, ex...