Abstract:Software model checking is a challenging problem, and generating relevant invariants is a key factor in proving the safety properties of a program. Program invariants can be obtained by various approaches, including lightweight procedures based on data-flow analysis and intensive techniques using Craig interpolation. Although data-flow analysis runs efficiently, it often produces invariants that are too weak to prove the properties. By contrast, interpolation-based approaches build strong invariants from interpolants, but they might not scale well due to expensive interpolation procedures. Invariants can also be injected into model-checking algorithms to assist the analysis. Invariant injection has been studied for many well-known approaches, including k-induction, predicate abstraction, and symbolic execution. We propose an augmented interpolation-based verification algorithm that injects external invariants into interpolation-based model checking (McMillan, 2003), a hardware model-checking algorithm recently adopted for software verification. The auxiliary invariants help prune unreachable states in Craig interpolants and confine the analysis to the reachable parts of a program. We implemented the proposed technique in the verification framework CPAchecker and evaluated it against mature SMT-based methods in CPAchecker as well as other state-of-the-art software verifiers. We found that injecting invariants reduces the number of interpolation queries needed to prove safety properties and improves the run-time efficiency. Consequently, the proposed invariant-injection approach verified difficult tasks that none of its plain version (i.e., without invariants), the invariant generator, or any compared tools could solve.

InterpChecker: Reducing State Space via Interpolations

Augmenting Interpolation-Based Model Checking with Auxiliary Invariants (Extended Version)

More anti-chain based refinement checking

A Counterexample-Guided Interpolant Generation Algorithm for SAT-based Model Checking

Interpolation and SAT-Based Model Checking Revisited: Adoption to Software Verification

ACSPChecker: an ASP based CSP model checking tool.

Adaptive interpolation-based model checking

Interpolation-Based Multi-core Bounded Model Checking of HSTM Designs.

Bounded Verification of Atomicity Violations for Interrupt-Driven Programs Via Lazy Sequentialization

Vetting API Usages in C Programs with IMChecker

An Efficient Explicit Model Checker

A Points-to-Sensitive Model Checker for C Programs in IoT Firmware

Program Verification by Using DISCOVERER

Design of a Certifying Compiler Supporting Proof of Program Safety

Crosscutting invariant and an efficient checking algorithm using program slicing

State Space Reduction in Modeling Checking Parameterized Cache Coherence Protocol by Two-Dimensional Abstraction

BUCKER 2.0: An Unfolding Based Checker for CTL

BPPChecker: An SMT-based Model Checker on Basic Parallel Processes

Generating Non-Linear Interpolants by Semidefinite Programming

BPPChecker: An SMT-based Model Checker on Basic Parallel Processes(Full Version)

Interactive abstract interpretation: reanalyzing multithreaded C programs for cheap