Abstract:Data-flow analyses like points-to analysis can vastly improve the precision of other analyses, and help perform powerful code optimizations. However, whole-program points-to analysis of large programs tend to be expensive - both in terms of time and memory. Consequently, many compilers (both static and JIT) and program-analysis tools tend to employ faster - but more conservative - points-to analysis to improve usability. As an alternative to such trading of precision for performance, various techniques have been proposed to perform precise yet expensive fixed-point points-to analyses ahead of time in a static analyzer, store the results, and then transmit them to independent compilation/program-analysis stages that may need them. However, an underlying concern of safety affects all such techniques - can a compiler (or program analysis tool) trust the points-to analysis results generated by another compiler/tool? In this work, we address this issue of trust, while keeping the issues of performance efficiency in mind. We propose ART: Analysis-results Representation Template - a novel scheme to efficiently and concisely encode results of flow-sensitive, context-insensitive points-to analysis computed by a static analyzer for use in any independent system that may benefit from such a highly precise points-to analysis. Our scheme has two components: (i) a producer that can statically perform expensive points-to analysis and encode the same concisely. (ii) a consumer that, on receiving such encoded results, can regenerate the points-to analysis results encoded by the artwork if it is deemed safe. We demonstrate the usage of ART by implementing a producer (in Soot) and two consumers (in Soot and the Eclipse OpenJ9 JIT compiler). We evaluate our implementation over various benchmarks from the DaCapo and SPECjvm2008 suites.

Property probes: Live exploration of program analysis results

LiveRec: Prototyping Probes by Framing Debug Protocols

ReProbe: An Architecture for Reconfigurable and Adaptive Probes

A Language-Independent Analysis Platform for Source Code

Does My Representation Capture X? Probe-Ably

INSPECT: Intrinsic and Systematic Probing Evaluation for Code Transformers

PropTest: Automatic Property Testing for Improved Visual Programming

RPA: Probabilistic analysis of probe performance and robust summarization

Analyzing Program Termination and Complexity Automatically with AProVE

Design and Implementation of a Tracer Driver: Easy and Efficient Dynamic Analyses of Constraint Logic Programs

Software reconnaissance: Mapping program features to code

Reversible Language Extensions and their Application in Debugging

The ART of Sharing Points-to Analysis (Extended Abstract)

A User-Guided Approach to Program Analysis

Probing the Probing Paradigm: Does Probing Accuracy Entail Task Relevance?

Probing via Prompting

Property-Based Testing by Elaborating Proof Outlines

Covana: Precise Identification Of Problems In Pex

Automatically Testing Functional Properties of Code Translation Models

How to Probe Sentence Embeddings in Low-Resource Languages: On Structural Design Choices for Probing Task Evaluation

ProPatrol: Attack Investigation via Extracted High-Level Tasks