Past-sensitive pointer analysis for symbolic execution
File(s)paper.pdf (1.04 MB)
Accepted version
Author(s)
Trabish, David
Kapus, Timotej
Rinetzky, Noam
Cadar, Cristian
Type
Conference Paper
Abstract
We propose a novel fine-grained integration of pointer analysis with dynamic analysis, including dynamic symbolic execution. This is achieved via past-sensitive pointer analysis, an on-demand pointer analysis instantiated with an abstraction of the dynamic state on which it is invoked. We evaluate our technique in three application scenarios: chopped symbolic execution, symbolic pointer resolution, and write integrity testing. Our preliminary results show that the approach can have a significant impact in these scenarios, by effectively improving the precision of standard pointer analysis with only a modest performance overhead.
Date Issued
2020-11-01
Date Acceptance
2020-06-16
Citation
Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2020, pp.19-208
ISBN
9781450370431
Publisher
ACM
Start Page
19
End Page
208
Journal / Book Title
Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
Copyright Statement
© 2020 ACM. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in ESEC/FSE 2020: Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering (Nov 2020) https://dl.acm.org/doi/10.1145/3368089.3409698
Sponsor
European Research Council (ERC)
Grant Number
819141
Source
European Software Engineering Conference / ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2020)
Publication Status
Published
Start Date
2020-11-06
Finish Date
2020-11-16
Coverage Spatial
Sacramento, California, United States (Virtual)