Abstract:Code translation transforms programs from one programming language (PL) to another. Several rule-based transpilers have been designed to automate code translation between different pairs of PLs. However, the rules can become obsolete as the PLs evolve and cannot generalize to other PLs. Recent studies have explored the automation of code translation using Large Language Models (LLMs). One key observation is that such techniques may work well for crafted benchmarks but fail to generalize to the scale and complexity of real-world projects with dependencies, custom types, PL-specific features, etc. We propose AlphaTrans, a neuro-symbolic approach to automate repository-level code translation. AlphaTrans translates both source and test code, and employs multiple levels of validation to ensure the translation preserves the functionality of the source program. To break down the problem for LLMs, AlphaTrans leverages program analysis to decompose the program into fragments and translates them in the reverse call order. We leveraged AlphaTrans to translate ten real-world open-source projects consisting of <836, 8575, 2719> classes, methods, and tests. AlphaTrans translated the entire repository of these projects consisting of 6899 source code fragments. 99.1% of the translated code fragments are syntactically correct, and AlphaTrans validates the translations' runtime behavior and functional correctness for 25.8%. On average, the integrated translation and validation take 36 hours to translate a project, showing its scalability in practice. For the syntactically or semantically incorrect translations, AlphaTrans generates a report including existing translation, stack trace, test errors, or assertion failures. We provided these artifacts to two developers to fix the translation bugs in four projects. They were able to fix the issues in 20.1 hours on average and achieve all passing tests.

Translation Validation for Security Properties

Secure Composition of Robust and Optimising Compilers

Security Policy for Information Erasing and Leaking in Multithreaded Codes

A Systematic Translation Validation Framework for MLIR-Based Compilers

Towards Trustworthy Automated Program Verifiers: Formally Validating Translations into an Intermediate Verification Language (extended version)

Do You Even Lift? Strengthening Compiler Security Guarantees Against Spectre Attacks

SECOMP: Formally Secure Compilation of Compartmentalized C Programs

Computationally Bounded Robust Compilation and Universally Composable Security

Automatically Testing Functional Properties of Code Translation Models

Repository-Level Compositional Code Translation and Validation

Fully Composable and Adequate Verified Compilation with Direct Refinements between Open Modules (Technical Report)

Validating JIT Compilers via Compilation Space Exploration

Sound Transpilation from Binary to Machine-Independent Code

Secure Optimization Through Opaque Observations

Enhancing Translation Validation of Compiler Transformations with Large Language Models

Composing security protocols: from confidentiality to privacy

Securing Verified IO Programs Against Unverified Code in F*

A Practical Approach to the Automatic Classification of Security-Relevant Commits

Evaluating the Language-Based Security for Plugin Development

Attacker Control and Impact for Confidentiality and Integrity