Abstract:Automatic generation of loop invariants is a fundamental challenge in software verification. While this task is undecidable in general, it is decidable for certain restricted classes of programs. This work focuses on invariant generation for (branching-free) loops with a single linear update. Our primary contribution is a polynomial-space algorithm that computes the strongest algebraic invariant for simple linear loops, generating all polynomial equations that hold among program variables across all reachable states. The key to achieving our complexity bounds lies in mitigating the blowup associated with variable elimination and Gröbner basis computation, as seen in prior works. Our procedure runs in polynomial time when the number of program variables is fixed. We examine various applications of our results on invariant generation, focusing on invariant verification and loop synthesis. The invariant verification problem investigates whether a polynomial ideal defining an algebraic set serves as an invariant for a given linear loop. We show that this problem is coNP-complete and lies in PSPACE when the input ideal is given in dense or sparse representations, respectively. In the context of loop synthesis, we aim to construct a loop with an infinite set of reachable states that upholds a specified algebraic property as an invariant. The strong synthesis variant of this problem requires the construction of loops for which the given property is the strongest invariant. In terms of hardness, synthesising loops over integers (or rationals) is as hard as Hilbert's Tenth problem (or its analogue over the rationals). When loop constants are constrained to bit-bounded rational numbers, we demonstrate that loop synthesis and its strong variant are both decidable in PSPACE, and in NP when the number of program variables is fixed.

Syndicate: Synergistic Synthesis of Ranking Function and Invariants for Termination Analysis

Ranking LLM-Generated Loop Invariants for Program Verification

Invariant Generation through Strategy Iteration in Succinctly Represented Control Flow Graphs

Probabilistic Program Verification Via Inductive Synthesis of Inductive Invariants.

(Un)Solvable Loop Analysis

Data-Driven Template-Free Invariant Generation

Synthesizing invariants by solving solvable loops

Loop invariant synthesis in a combined abstract domain

Breaking the Mold: Nonlinear Ranking Function Synthesis Without Templates

Proving Termination by K-Induction.

Structural Invariants for Parametric Verification of Systems with Almost Linear Architectures

Synthesising Interprocedural Bit-Precise Termination Proofs (T).

Simple Linear Loops: Algebraic Invariants and Applications

Ranking Templates for Linear Loops

Program Verification By Reduction To Semi-Algebraic Systems Solving

Using Dynamic Analysis to Generate Disjunctive Invariants

Linear Loop Synthesis for Quadratic Invariants

Beyond the elementary representations of program invariants over algebraic data types

Proofs as Relational Invariants of Synthesized Execution Grammars

Invariant Checking for SMT-based Systems with Quantifiers