Abstract:A growing trend in program analysis is to encode verification conditions within the language of the input program. This simplifies the design of analysis tools by utilizing off-the-shelf verifiers, but makes communication with the underlying solver more challenging. Essentially, the analyzer operates at the level of input programs, whereas the solver operates at the level of problem encodings. To bridge this gap, the verifier must pass along proof-rules from the analyzer to the solver. For example, an analyzer for concurrent programs built on an inductive program verifier might need to declare Owicki-Gries style proof-rules for the underlying solver. Each such proof-rule further specifies how a program should be verified, meaning that the problem of passing proof-rules is a form of invariant synthesis. Similarly, many program analysis tasks reduce to the synthesis of pure, loop-free Boolean functions (i.e., predicates), relative to a program. From this observation, we propose Inductive Predicate Synthesis Modulo Programs (IPS-MP) which extends high-level languages with minimal synthesis features to guide analysis. In IPS-MP, unknown predicates appear under assume and assert statements, acting as specifications modulo the program semantics. Existing synthesis solvers are inefficient at IPS-MP as they target more general problems. In this paper, we show that IPS-MP admits an efficient solution in the Boolean case, despite being generally undecidable. Moreover, we show that IPS-MP reduces to the satisfiability of constrained Horn clauses, which is less general than existing synthesis problems, yet expressive enough to encode verification tasks. We provide reductions from challenging verification tasks -- such as parameterized model checking -- to IPS-MP. We realize these reductions with an efficient IPS-MP-solver based on SeaHorn, and describe a application to smart-contract verification.

On Integrating Deductive Synthesis and Verification Systems

Deductive Software Verification: From Pen-and-Paper Proofs to Industrial Tools

Probabilistic Program Verification Via Inductive Synthesis of Inductive Invariants.

Automated Verification of Reactive and Concurrent Programs by Calculation

Sciduction: Combining Induction, Deduction, and Structure for Verification and Synthesis

Program Synthesis in Saturation

Proving Functional Program Equivalence via Directed Lemma Synthesis

Toward Neural-Network-Guided Program Synthesis and Verification

An Update on Deductive Synthesis and Repair in the Leon Tool

A Program Instrumentation Framework for Automatic Verification

A Deductive Verification Infrastructure for Probabilistic Programs

Deductive Verification via the Debug Adapter Protocol

An Infinite Needle in a Finite Haystack: Finding Infinite Counter-Models in Deductive Verification

Structural Invariants for Parametric Verification of Systems with Almost Linear Architectures

Deductive Verification of Programs with Underspecified Semantics by Model Extraction

Synthesis of Distributed Agreement-Based Systems with Efficiently-Decidable Verification (Extended Version)

A Language-Independent Program Verification Framework

Towards Automated Verification of LLM-Synthesized C Programs

Inductive Predicate Synthesis Modulo Programs (Extended)

Higher-order Program Verification as Satisfiability Modulo Theories with Algebraic Data-types

Practical Deductive Verification of OCaml Programs (Extended Version)