Abstract:Automatic generation of loop invariants is a fundamental challenge in software verification. While this task is undecidable in general, it is decidable for certain restricted classes of programs. This work focuses on invariant generation for (branching-free) loops with a single linear update. Our primary contribution is a polynomial-space algorithm that computes the strongest algebraic invariant for simple linear loops, generating all polynomial equations that hold among program variables across all reachable states. The key to achieving our complexity bounds lies in mitigating the blowup associated with variable elimination and Gröbner basis computation, as seen in prior works. Our procedure runs in polynomial time when the number of program variables is fixed. We examine various applications of our results on invariant generation, focusing on invariant verification and loop synthesis. The invariant verification problem investigates whether a polynomial ideal defining an algebraic set serves as an invariant for a given linear loop. We show that this problem is coNP-complete and lies in PSPACE when the input ideal is given in dense or sparse representations, respectively. In the context of loop synthesis, we aim to construct a loop with an infinite set of reachable states that upholds a specified algebraic property as an invariant. The strong synthesis variant of this problem requires the construction of loops for which the given property is the strongest invariant. In terms of hardness, synthesising loops over integers (or rationals) is as hard as Hilbert's Tenth problem (or its analogue over the rationals). When loop constants are constrained to bit-bounded rational numbers, we demonstrate that loop synthesis and its strong variant are both decidable in PSPACE, and in NP when the number of program variables is fixed.

An Iterative Method For Generating Loop Invariants

Synthesizing invariants by solving solvable loops

Learning Likely Invariants to Explain Why a Program Fails

A Novel Data-Driven Approach for Generating Verified Loop Invariants *

Generating Loop Invariants for Program Verification by Transformation

From Polynomial Invariants to Linear Loops

Linear Loop Synthesis for Quadratic Invariants

A novel data-driven approach on inferring loop invariants for C programs

(Un)Solvable Loop Analysis

Finding Polynomial Loop Invariants for Probabilistic Programs

Simple Linear Loops: Algebraic Invariants and Applications

Invariant Generation through Strategy Iteration in Succinctly Represented Control Flow Graphs

Algebraic Tools for Computing Polynomial Loop Invariants

An Adaptive Loop Invariant Generation Approach

Invariant Generation for Multi-Path Loops with Polynomial Assignments

Post-condition-Directed Invariant Inference for Loops over Data Structures.

Ilinva: Using Abduction to Generate Loop Invariants

Counterexample-Guided Polynomial Loop Invariant Generation by Lagrange Interpolation

Loop invariant synthesis in a combined abstract domain

A Framework for Array Invariants Synthesis in Induction-Loop Programs.