Automatic abstraction is a powerful software verification technique. In this paper, we elaborate an abstract domain for C strings, that is, null-terminated arrays of characters. We describe the abstract semantics of basic string operations and prove their soundness with regards to previously established concrete semantics of those operations. In addition to a selection of string functions from the standard C library, we provide semantics for character access and update, enabling automatic lifting of arbitrary string-manipulating code into the domain. The domain we present (called M-String) has two other abstract domains as its parameters: an index (bound) domain and a character domain. Picking different constituent domains allows M-String to be tailored for specific verification tasks, balancing precision against complexity. In addition to describing the domain theoretically, we also provide an executable implementation of the abstract operations. Using a tool which automatically lifts existing programs into the M-String domain along with an explicit-state model checker, we have evaluated the proposed domain experimentally on a few simple but realistic test programs.
|Titolo:||String Abstraction for Model Checking of C Programs|
OLLIARO, MARTINA (Corresponding)
|Data di pubblicazione:||2019|
|Appare nelle tipologie:||4.1 Articolo in Atti di convegno|
File in questo prodotto:
|SPIN19_preprint.pdf||preprint||Documento in Pre-print||Accesso gratuito (solo visione)||Open Access dal 31/12/2020|