Modular inference of subprogram contracts for safety checking

详细信息    查看全文

• 作者：Yannick Moy ; Claude Marché
• 关键词：Specification languages ; Functional behavior ; Contracts ; Inference ; Abstract interpretation ; Weakest precondition ; Quantifier elimination
• 刊名：Journal of Symbolic Computation
• 出版年：2010
• 出版时间：November 2010
• 年：2010
• 卷：45
• 期：11
• 页码：1184-1211
• 全文大小：734 K

文摘

Contracts expressed by logic formulas allow one to formally specify expected behavior of programs. But writing such specifications manually takes a significant amount of work, in particular for uninteresting contracts which only aim at avoiding run-time errors during the execution. Thus, for programs of large size, it is desirable to at least partially infer such contracts. We propose a method to infer contracts expressed as boolean combinations of linear equalities and inequalities by combining different kinds of static analyses: abstract interpretation, weakest precondition computation and quantifier elimination. An important originality of our approach is to proceed modularly, considering subprograms independently.

The practical applicability of our approach is demonstrated on experiments performed on a library and two benchmarks of vulnerabilities of C code.