Scalable shape analysis for systems code

Pointer safety faults in device drivers are one of the leading causes of crashes in operating systems code. In principle, shape analysis tools can be used to prove the absence of this type of error. In practice, however, shape analysis is not used due to the unacceptable mixture of scalability and p...

Full description

Bibliographic Details
Main Authors: Yang, H, Lee, O, Berdine, J, Calcagno, C, Cook, B, Distefano, D, O'Hearn, P
Format: Journal article
Language:English
Published: 2008
_version_ 1797054362469531648
author Yang, H
Lee, O
Berdine, J
Calcagno, C
Cook, B
Distefano, D
O'Hearn, P
author_facet Yang, H
Lee, O
Berdine, J
Calcagno, C
Cook, B
Distefano, D
O'Hearn, P
author_sort Yang, H
collection OXFORD
description Pointer safety faults in device drivers are one of the leading causes of crashes in operating systems code. In principle, shape analysis tools can be used to prove the absence of this type of error. In practice, however, shape analysis is not used due to the unacceptable mixture of scalability and precision provided by existing tools. In this paper we report on a new join operation for the separation domain which aggressively abstracts information for scalability yet does not lead to false error reports. is a critical piece of a new shape analysis tool that provides an acceptable mixture of scalability and precision for industrial application. Experiments on whole Windows and Linux device drivers (firewire, pci-driver, cdrom, md, etc.) represent the first working application of shape analysis to verification of whole industrial programs. © 2008 Springer-Verlag.
first_indexed 2024-03-06T18:56:13Z
format Journal article
id oxford-uuid:11ef3a1d-441f-489c-9ea4-fc4be0f9e377
institution University of Oxford
language English
last_indexed 2024-03-06T18:56:13Z
publishDate 2008
record_format dspace
spelling oxford-uuid:11ef3a1d-441f-489c-9ea4-fc4be0f9e3772022-03-26T10:04:57ZScalable shape analysis for systems codeJournal articlehttp://purl.org/coar/resource_type/c_dcae04bcuuid:11ef3a1d-441f-489c-9ea4-fc4be0f9e377EnglishSymplectic Elements at Oxford2008Yang, HLee, OBerdine, JCalcagno, CCook, BDistefano, DO'Hearn, PPointer safety faults in device drivers are one of the leading causes of crashes in operating systems code. In principle, shape analysis tools can be used to prove the absence of this type of error. In practice, however, shape analysis is not used due to the unacceptable mixture of scalability and precision provided by existing tools. In this paper we report on a new join operation for the separation domain which aggressively abstracts information for scalability yet does not lead to false error reports. is a critical piece of a new shape analysis tool that provides an acceptable mixture of scalability and precision for industrial application. Experiments on whole Windows and Linux device drivers (firewire, pci-driver, cdrom, md, etc.) represent the first working application of shape analysis to verification of whole industrial programs. © 2008 Springer-Verlag.
spellingShingle Yang, H
Lee, O
Berdine, J
Calcagno, C
Cook, B
Distefano, D
O'Hearn, P
Scalable shape analysis for systems code
title Scalable shape analysis for systems code
title_full Scalable shape analysis for systems code
title_fullStr Scalable shape analysis for systems code
title_full_unstemmed Scalable shape analysis for systems code
title_short Scalable shape analysis for systems code
title_sort scalable shape analysis for systems code
work_keys_str_mv AT yangh scalableshapeanalysisforsystemscode
AT leeo scalableshapeanalysisforsystemscode
AT berdinej scalableshapeanalysisforsystemscode
AT calcagnoc scalableshapeanalysisforsystemscode
AT cookb scalableshapeanalysisforsystemscode
AT distefanod scalableshapeanalysisforsystemscode
AT ohearnp scalableshapeanalysisforsystemscode