Abstract:Data-flow analyses like points-to analysis can vastly improve the precision of other analyses, and help perform powerful code optimizations. However, whole-program points-to analysis of large programs tend to be expensive - both in terms of time and memory. Consequently, many compilers (both static and JIT) and program-analysis tools tend to employ faster - but more conservative - points-to analysis to improve usability. As an alternative to such trading of precision for performance, various techniques have been proposed to perform precise yet expensive fixed-point points-to analyses ahead of time in a static analyzer, store the results, and then transmit them to independent compilation/program-analysis stages that may need them. However, an underlying concern of safety affects all such techniques - can a compiler (or program analysis tool) trust the points-to analysis results generated by another compiler/tool? In this work, we address this issue of trust, while keeping the issues of performance efficiency in mind. We propose ART: Analysis-results Representation Template - a novel scheme to efficiently and concisely encode results of flow-sensitive, context-insensitive points-to analysis computed by a static analyzer for use in any independent system that may benefit from such a highly precise points-to analysis. Our scheme has two components: (i) a producer that can statically perform expensive points-to analysis and encode the same concisely. (ii) a consumer that, on receiving such encoded results, can regenerate the points-to analysis results encoded by the artwork if it is deemed safe. We demonstrate the usage of ART by implementing a producer (in Soot) and two consumers (in Soot and the Eclipse OpenJ9 JIT compiler). We evaluate our implementation over various benchmarks from the DaCapo and SPECjvm2008 suites.

Points to analysis for partial call graph construction

Efficient Points-To Analysis for Partial Call Graph Construction

Call-Graph-Based Context-Sensitive Points-to Analysis for Java

An Effective Approach of Points-To Analysis

Optimization of Points-to Analysis for Java

The ART of Sharing Points-to Analysis (Extended Abstract)

Modeling and Diagnosing Buggy Programs with Points-To Analysis

Optimize Context-Sensitive Andersen-style Points-to Analysis by Method Summarization and Cycle-Elimination

Precise and Efficient Points-to Analysis via New Context-Sensitivity and Heap Abstraction.

A Constraint-Weaving Approach to Points-To Analysis for Aspectj

Data-flow Summarization of Android Library with Points-to Analysis

Probabilistic Points-to Analysis for Java

Contribution-Based Call Stack Abstraction and Its Application in Pointer Analysis of AspectJ Programs

Refining Indirect Call Targets at the Binary Level.

Necessity and Capability of Flow, Context, Field and Quasi Path Sensitive Points-to Analysis

Contribution-based call stack abstraction for call string based pointer analysis

Parallelizing Flow-Sensitive Demand-Driven Points-to Analysis

Efficient and Precise Points-to Analysis: Modeling the Heap by Merging Equivalent Automata

Efficient Construction of Practical Python Call Graphs with Entity Knowledge Base

ON CALL GRAPH GENERATION ALGORITHM OF ASPECT-ORIENTED PROGRAM

A New Approach to Pointer Analysis for Assignments.