Abstract:Verification techniques express program states as logical formulas over program variables. For example, symbolic execution and abstract interpretation encode program states as a set of integer inequalities. However, for real-world programs these formulas tend to become large, which affects scalability of analyses. To address this problem, researchers developed complementary approaches which either remove redundant inequalities or extract a subset of inequalities sufficient for specific reasoning. For arbitrary integer inequalities, such reduction approaches either have high complexities or over-approximate. However, efficiency and precision of these approaches can be improved for a restricted type of logical formulas used in relational numerical abstract domains. While previous work investigated custom efficient redundant inequality elimination for Zones states, our work examines custom semantic slicing algorithms that identify a minimal set of changed inequalities in Zones states. The client application of the minimal changes in Zones is an empirical study on comparison between invariants computed by data-flow analysis using Zones, Intervals and Predicates numerical domains. In particular, evaluations compare how our proposed algorithms affect the precision of comparing Zones vs. Intervals and Zones vs. Predicates abstract domains. The results show our techniques reduce the number of variables by more than 70% and the number of inequalities by 30%, compared to full states. The approach refines the granularity of comparison between domains, reducing incomparable invariants between Zones and Predicates from 52% to 4%, and increases equality of Intervals and Zones, invariants from 27% to 71%. The techniques improve the comparison efficiency by reducing total runtime for all subject comparisons for Zones and Predicates from over 4 minutes to a few seconds.

An Abstract Domain Based on Two-Interval Difference-Bound Matrices

The Octagon Abstract Domain

Interval topology of lattice effect algebras

Strided Difference Bound Matrices

Relational Abstract Domains for the Detection of Floating-Point Run-Time Errors

A Framework for Array Invariants Synthesis in Induction-Loop Programs.

Approximate Solutions for Abstract Inequality Systems

Schur D-stability of Interval Matrices

Lattice-valued interval sets and t-representable interval set t-norms

Error Bounds for Approximate Solutions of Abstract Inequality Systems and Infinite Systems of Inequalities on Banach Spaces

Probability Approach for Interval-Valued Ordered Decision Systems in Dominance-Based Fuzzy Rough Set Theory

Decoupling the ascending and descending phases in Abstract Interpretation

A Property of Eigenvalue Bounds for a Class of Symmetric Tridiagonal Interval Matrices

Domain Types: Selecting Abstractions Based on Variable Usage

Generalization of real interval matrices to other fields

The Digraphs and Inclusion Intervals of Matrix Singular Values

Identifying Minimal Changes in the Zone Abstract Domain

Property of the Eigenvalue Bounds of a Class of Interval Matrices

Efficient Implementation of an Abstract Domain of Quantified First-Order Formulas

Non-Numerical Weakly Relational Domains

On almost B-summable double sequence spaces