Abstract:Analyzing loops is very important for various software engineering tasks such as bug detection, test case generation and program optimization. However, loops are very challenging structures for program analysis, especially when (nested) loops contain multiple paths that have complex interleaving relationships. In this paper, we propose the path dependency automaton (PDA) to capture the dependencies among the multiple paths in a loop. Based on the PDA, we first propose a loop classification to understand the complexity of loop summarization. Then, we propose a loop analysis framework, named Proteus, which takes a loop program and a set of variables of interest as inputs and summarizes path-sensitive loop effects (i.e., disjunctive loop summary) on the variables of interest. An algorithm is proposed to traverse the PDA to summarize the effect for all possible executions in the loop. We have evaluated Proteus using loops from five open-source projects and two well-known benchmarks and applying the disjunctive loop summary to three applications: loop bound analysis, program verification and test case generation. The evaluation results have demonstrated that Proteus can compute a more precise bound than the existing loop bound analysis techniques; Proteus can significantly outperform the state-of-the-art tools for loop program verification; and Proteus can help generate test cases for deep loops within one second, while symbolic execution tools KLEE and Pex either need much more time or fail.

A System on Visualization of Program Executive Path and Extraction of Path Sets

Effective code coverage in compositional systematic dynamic testing

Visualizing Path Exploration to Assist Problem Diagnosis for Structural Test Generation

Steering Symbolic Execution to Less Traveled Paths

Visual Exploration of Dependency Graph in Source Code Via Embedding-Based Similarity.

Proteus: Computing Disjunctive Loop Summary Via Path Dependency Analysis

Automatic Loop Summarization Via Path Dependency Analysis

The Algorithm of Automatic Acquisition of View Outline Information Based on Topological Mapping

A Path-Based Method of Parallelizing C++ Programs

Data Automatic Generation Approach for Path Test

E-Planner: An Efficient Path Planner on a Visibility Graph in Unknown Environments

An Empirical Study of Path Feasibility Queries

CAPS: an Efficient Whole-Program Critical Paths Search Framework for Large-Scale Software.

Fast Parallel Path Concatenation for Graph Extraction

Parallel Program Analysis on Path Ranges

A Graph Covering Method for Template Based System Partition

Towards an Efficient Path-Oriented Tool for Bounded Reachability Analysis of Linear Hybrid Systems using Linear Programming

Path Coverage Metric Based on Critical Signals

Automatically layout and visualize the biological pathway map with spectral graph theory

Complete Area Coverage Path-Planning with Arbitrary Shape Obstacles

Octopus : Scaling Value-Flow Analysis via Parallel Collection of Realizable Path Conditions