A segmented memory model for symbolic execution
A segmented memory model for symbolic execution
复制标题
用于符号执行的分段内存模型
DOI:
10.1145/3338906.3338936
复制
发表时间:
2019
期刊:
影响因子:
--
通讯作者:
Kapus T
中科院分区:
文献类型:
--
作者:
Kapus T
Symbolic execution is an effective technique for exploring paths in a program and reasoning about all possible values on those paths. However, the technique still struggles with code that uses complex heap data structures, in which a pointer is allowed to refer to more than one memory object. In such cases, symbolic execution typically forks execution into multiple states, one for each object to which the pointer could refer.In this paper, we propose a technique that avoids this expensive forking by using a segmented memory model. In this model, memory is split into segments, so that each symbolic pointer refers to objects in a single segment. The size of the segments are bound by a threshold, in order to avoid expensive constraints. This results in a memory model where forking due to symbolic pointer dereferences is significantly reduced, often completely.We evaluate our segmented memory model on a mix of whole program benchmarks (such as m4 and make) and library benchmarks (such as SQLite), and observe significant decreases in execution time and memory usage.
DOI:
--
发表时间:
2018
期刊:
International Conference on Verification, Model Checking and Abstract Interpretation
影响因子:
--
作者:
Quentin Bouillaguet;François Bobot;M. Sighireanu;Boris Yakobowski
通讯作者:
Boris Yakobowski
DOI:
--
发表时间:
1999
期刊:
影响因子:
--
作者:
M. Hind;Research Division Almaden T.J. Watson;Tokyo Zurich;Anthony Pioli
通讯作者:
Anthony Pioli
DOI:
10.1145/3092703.3092715
发表时间:
2017
期刊:
--
影响因子:
--
作者:
Braione P
通讯作者:
Braione P