Specialisation: Context-Dependent Reasoning in Incorrectness Separation Logic
This program is tentative and subject to change.
Compositional static analysis has enabled the application of bug-finding techniques at scale, as demonstrated by tools such as Infer’s Pulse engine. However, restricting the analysis to the level of procedures results in losing awareness of the program state when a function is called. In particular for procedures involving dynamic dispatching or argument pointer aliasing, context is essential for effective specification inference. This work presents \emph{specialisation}, a mechanism that enables the generation of summaries tailored to individual call site contexts when necessary. We discuss the intuition behind our formalisation of this technique and present our preliminary results on the impact of specialisation when analysing open-source projects with the Pulse engine.
This program is tentative and subject to change.
Mon 12 JanDisplayed time zone: Brussels, Copenhagen, Madrid, Paris change
14:00 - 15:30 | |||
14:00 22mTalk | Soteria Rust: Efficient Symbolic Execution for Rust TPSA Opale Sjöstedt Imperial College London, Sacha-Élie Ayoun Imperial College London, Azalea Raad Imperial College London | ||
14:22 22mTalk | Towards automatic functional correctness in the Mopsa static analyzer TPSA Milla Valnet Sorbonne Université, Raphaël Monat Inria and University of Lille, Antoine Miné Sorbonne Université | ||
14:45 22mTalk | An LLVM frontend for Infer for Swift analysis TPSA Dulma Churchill Meta | ||
15:07 22mTalk | Specialisation: Context-Dependent Reasoning in Incorrectness Separation Logic TPSA Raquel Fernandes da Silva Imperial College London, Sacha-Élie Ayoun Imperial College London, Azalea Raad Imperial College London, David Pichardie Meta | ||