Joint Forces for Memory Safety Checking Revisited

CHALUPA, Marek, Jan STREJČEK and Martina VITOVSKÁ. Joint Forces for Memory Safety Checking Revisited. International Journal on Software Tools for Technology Transfer (STTT). Springer, 2020, vol. 22, No 2, p. 115-133. ISSN 1433-2779. Available from: https://dx.doi.org/10.1007/s10009-019-00526-2.

Basic information

• Original name: Joint Forces for Memory Safety Checking Revisited
• Authors: CHALUPA, Marek (203 Czech Republic, belonging to the institution), Jan STREJČEK (203 Czech Republic, guarantor, belonging to the institution) and Martina VITOVSKÁ (203 Czech Republic, belonging to the institution).
• Edition: International Journal on Software Tools for Technology Transfer (STTT), Springer, 2020, 1433-2779.

Other information

• Original language: English
• Type of outcome: Article in a journal
• Field of Study: 10201 Computer sciences, information science, bioinformatics
• Country of publisher: Germany
• Confidentiality degree: is not subject to a state or trade secret
• WWW: URL
• Impact factor: Impact factor: 0.739
• RIV identification code: RIV/00216224:14330/20:00113978
• Organization unit: Faculty of Informatics
• Doi: http://dx.doi.org/10.1007/s10009-019-00526-2
• UT WoS: 000521561800003
• Keywords in English: memory safety; instrumentation; program slicing; symbolic execution; Symbiotic
• Tags: bug-detection, formal verification, formela-journal, program analysis, program slicing, Symbiotic
• Tags: International impact, Reviewed

Abstract

We present an improved version of the memory safety verification approach implemented in Symbiotic 5, the winner of the MemSafety category at the Competition on Software Verification (SV-COMP) 2018. The approach can verify programs for standard errors in memory usage like invalid pointer dereference or memory leaking. It is based on instrumentation, static pointer analysis extended to consider memory deallocations, static program slicing, and symbolic execution. The improved version brings higher precision of the extended pointer analysis and further optimizations in instrumentation. It is implemented in the current version of Symbiotic, which contains also some improvements in program slicing and symbolic execution. We explain the approach in theory, describe implementation of selected components, and provide experimental results showing the impact of particular components.

Links

• GA18-02177S, research and development project: Name: Abstrakce a jiné techniky v semi-symbolické verifikaci programů

Investor: Czech Science Foundation

• MUNI/A/1050/2019, interní kód MU: Name: Rozsáhlé výpočetní systémy: modely, aplikace a verifikace IX (Acronym: SV-FI MAV IX)

Investor: Masaryk University, Category A