Abstract:Automatic generation of loop invariants is a fundamental challenge in software verification. While this task is undecidable in general, it is decidable for certain restricted classes of programs. This work focuses on invariant generation for (branching-free) loops with a single linear update. Our primary contribution is a polynomial-space algorithm that computes the strongest algebraic invariant for simple linear loops, generating all polynomial equations that hold among program variables across all reachable states. The key to achieving our complexity bounds lies in mitigating the blowup associated with variable elimination and Gröbner basis computation, as seen in prior works. Our procedure runs in polynomial time when the number of program variables is fixed. We examine various applications of our results on invariant generation, focusing on invariant verification and loop synthesis. The invariant verification problem investigates whether a polynomial ideal defining an algebraic set serves as an invariant for a given linear loop. We show that this problem is coNP-complete and lies in PSPACE when the input ideal is given in dense or sparse representations, respectively. In the context of loop synthesis, we aim to construct a loop with an infinite set of reachable states that upholds a specified algebraic property as an invariant. The strong synthesis variant of this problem requires the construction of loops for which the given property is the strongest invariant. In terms of hardness, synthesising loops over integers (or rationals) is as hard as Hilbert's Tenth problem (or its analogue over the rationals). When loop constants are constrained to bit-bounded rational numbers, we demonstrate that loop synthesis and its strong variant are both decidable in PSPACE, and in NP when the number of program variables is fixed.

Program Verification By Reduction To Semi-Algebraic Systems Solving

Recent Advances in Program Verification Through Computer Algebra.

Program Verification by Using DISCOVERER

Verifying Programs Using Abstraction and Theorem Proving.

Structural Invariants for Parametric Verification of Systems with Almost Linear Architectures

Solvable Polynomial Ideals: The Ideal Reflection for Program Analysis

Generating polynomial invariants with DISCOVERER and QEPCAD

Probabilistic Program Verification Via Inductive Synthesis of Inductive Invariants.

Invariant Detection with Program Verification Tools

Generating Semi-Algebraic Invariants for Non-Autonomous Polynomial Hybrid Systems

Safety Verification of Semi-Algebraic Dynamical Systems Via Inductive Invariant

Generically Automating Separation Logic by Functors, Homomorphisms and Modules

A Program Instrumentation Framework for Automatic Verification

Infer Precise Program Invariant Using Abstract Interpretation with Recurrence Solving.

Formal Verification for C Program

Synthesizing invariants by solving solvable loops

Simple Linear Loops: Algebraic Invariants and Applications

Compositional Safety Verification with Max-SMT

VST-A: A Foundationally Sound Annotation Verifier

Finding Polynomial Loop Invariants for Probabilistic Programs

Model Checking in Bits and Pieces