J. S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In Proc. Static Analysis Symposium, volume 1824 of LNCS, pages 175--198. Springer-Verlag, 2000.  Home/Search   Document Details and Download   Summary   Related Articles   Check

....Java and C . Both flow sensitive and context sensitive techniques were used in pointer analysis [21] In general, the analysis community decided that flow sensitivity was not scalable to large programs. Context sensitivity for C pointer analysis also was explored independent of flow sensitivity [17, 22, 35], but the verdict on its effectiveness is less clear. Keeping calling contexts distinguished is of varying importance in a C program, depending on programming style, whereas in object oriented codes it seems crucial for obtaining high precision for problems needing dependence information, for ....

J. Foster, M. F ahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for c. In in Proceedings of International Symposium on Static Analysis, April 2000.

....to e.g. the analysis can determine which are the locations that p may point to at line 1. In addition, pointer analysis determines which function addresses may be stored in a given function pointer. Because of the importance of such information, a variety of pointer analyses have been developed [11, 12, 9, 5, 1, 22, 20, 25, 18, 13, 7, 4, 6, 3]. These analyses provide different tradeoffs between cost and precision. For example, flow and context insensitive pointer analyses [1, 20, 25, 18, 4] ignore the flow of control between program points and do not distinguish between different calling contexts of procedures. As a result, such ....

....a conceptual fully precise pointer analysis . This analysis is a fully flow sensitive, contextsensitive, field sensitive pointer analysis that represents a point at the very high end of the design space for pointer analysis. A large number of pointer analyses (or their minor variations) [11, 9, 5, 1, 22, 20, 25, 18, 13, 7, 4, 6, 3] can be considered approximate versions of P that is, the solution computed by is a subset of the solutions computed by these analyses. was specifically designed to achieve this high precision. For example, the analysis maintains full information about calling context; for existing ....

[Article contains additional citation context not shown here]

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In Static Analysis Symposium, LNCS 1824, pages 175--198, 2000.

....from above, pointer analysis can determine what are the locations that p may point to. In addition, pointer analysis determines which function addresses may be stored in a given function pointer. Because of the importance of such points to information, a variety of analyses have been developed [10, 9, 5, 1, 18, 17, 20, 15, 11, 7, 4, 6, 3, 14, 8]. These analyses provide different tradeoffs between cost and precision. For example, flow and context insensitive pointer analyses [1, 17, 20, 15, 4] ignore the flow of control between program points and do not distinguish between different calling contexts of procedures. As a result, such ....

....FA analysis may provide sufficient precision for the purposes of call graph construction. In this context, the use of more expensive pointer analyses may not be necessary. 6 Related Work There is a large body of work on various pointer analyses for C with different degrees of cost and precision [10, 9, 5, 1, 18, 17, 20, 15, 11, 7, 4, 6, 3, 14, 8]. Traditionally, the precision of these analyses has been evaluated with respect to the disambiguation of indirect memory reads and writes (e.g. in p=1) Our work evaluates the precision of pointer analysis with respect to indirect procedure calls and call graph construction. Existing work ....

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In International Static Analysis Symposium, LNCS 1824, pages 175--198, 2000.

....Side e#ect analysis for languages like C is di#cult because pointers allow indirect memory accesses and indirect procedure calls. Typically, mod analysis uses the output of a points to analysis to resolve pointer dereferences. Various whole program points to analyses have been developed [35, 33, 21, 4, 68, 60, 69, 56, 36, 25, 17, 23, 12, 32, 54]. In this chapter we focus on the category of flow and context insensitive analyses [4, 60, 69, 56, 17, 32] Such analyses ignore the flow of control between program points and do not distinguish between di#erent calling contexts of procedures. As a result, analyses from this category are e#cient ....

....to flowinsensitive analyses and are not included in the representation. Because of the weak type system of C (due to typecasting and union types) we assume that type information is not used in the points to and mod analyses , and therefore the program representation is untyped. Similarly to [60, 56, 55, 22, 25, 17, 23, 34, 32], structures and arrays are represented as monolithic objects without distinguishing their individual elements. We assume that calls to malloc and other heap allocating functions are replaced by statements of the form x = heap i , where heap i is a variable unique to the allocation site. Figure ....

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In Static Analysis Symposium, LNCS 1824, pages 175--198, 2000.

....[1] or simply pointer analysis. Recent work on pointer analysis has focused on efficiency [3, 4, 5] tradeoffs between efficiency and accuracy (e.g. the choice of a subset based [6] or unification based [7] analysis [8, 9] or on the cost and benefits of context sensitivity and polymorphism [10, 11]. Techniques for incremental analyses have been proposed, so that small modifications of the source code require only small recomputation [9, 15] Although these methods can reduce the cost of typical end toend applications of pointer analyses, in the end they perform an exhaustive analysis i.e. ....

....for a context sensitive analysis. By restricting attention to contexts that are relevant to a particular query, a demand driven analysis could potentially support much more aggressive context duplication (and flow duplication) policies e.g. beyond the polymorphic points to analysis considered in [11]. Moreover, we expect that aggressive contextduplication will improve the query independence of the pointsto graph, and that degenerate behavior, where one query requires computation of the entire points to graph, will be much less likely. As a first step towards demand driven points to ....

J. Foster, M. Fahndrich and A. Aiken, "Polymorphic versus Monomorphic Flow-insensitive Points-to Analysis for C", SAS 2000.

....In this paper we consider a constraint language with simple inequality constraints over a lattice. Such constraints show up in several type based program analyses such as flow analyses, e.g. Mos97] binding time analyses, e.g. DHM95] usage analyses, e.g. TWM95] points to analyses, e.g. [FFA00] and uniqueness type systems [BS96] We extend this simple constraint language with constraint abstractions which allow the constraints to compactly express substitution instantiation. The main result of this paper is a constraint solving algorithm which computes least solutions to the extended ....

.... be used to yield a cubic algorithm for Mossin s polymorphic flow analysis with flow subtyping and flow polymorphic recursion [Mos97] We believe that our approach can be applied to a number of other type based program analyses such as binding time analyses, e.g. DHM95] points to analyses, e.g. [FFA00] and uniqueness type systems [BS96] An interesting possibility for future work is to explore alternative constraint solving algorithms. The current algorithm has a rather compositional character in that, it rewrites the body of a constraint abstraction without considering how it is called. In ....

J. Foster, M. Fandrich, and A. Aiken. Polymorphic versus Monomorphic Flow-insensitive Points-to Analysis for C. In Proceedings of

....can be used to reduce the effect of join points. However the cost of these additional mechanisms can be large, and without other breakthroughs, they are unlikely to scale to millions of lines of code. Also, recent results suggest that this approach may be of little benefit for Andersen s analysis [13]. In principle, ideas from sub transitive control flow analysis [18] could also be applied to avoid propagation of the information from join points. The basic idea of sub transitive control flow analysis is that the usual dynamic transitive closure formulation of control flow analysis is ....

J. Foster, M. Fahndrich and A. Aiken, "Polymorphic versus Monomorphic Flow-insensitive Points-to Analysis for C", SAS 2000.

....all functions that are pointed to by fp. Precise information about memory accesses and procedure calls is fundamental for a large number of static analyses used in optimizing compilers and software engineering tools. To obtain such information, a variety of pointer analyses have been developed [8, 7, 4, 1, 15, 14, 17, 12, 9, 6, 3, 5, 2]. These analyses provide di#erent tradeo#s between cost and precision. For example, flowand context insensitive pointer analyses [1, 14, 17, 12, 3] # This research was supported by NSF grant CCR 9900988 and by Siemens Corporate Research. ignore the flow of control between program points and do ....

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive pointsto analysis for C. In Static Analysis Symposium, LNCS 1824, pages 175--198, 2000.

No context found.

Je#rey S. Foster, Manuel Fahndrich, and Alexander Aiken. Polymorphic versus Monomorphic Flow-insensitive Points-to Analysis for C. In Jens Palsberg, editor, Static Analysis, Seventh International Symposium, volume 1824 of Lecture Notes in Computer Science, pages 175--198, Santa Barbara, CA, June/July 2000. SpringerVerlag.

No context found.

J. S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In Proc. Static Analysis Symposium, volume 1824 of LNCS, pages 175--198. Springer-Verlag, 2000.

No context found.

J.S. Foster, M. F ahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In SAS, 2000.

No context found.

J.S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In SAS, 2000.

No context found.

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In SAS, LNCS 1824, pages 175--198, 2000.

No context found.

Foster, J., Fhndrich, M., and Aiken, A.: 2000, `Polymorphic versus Monomorphic Flow-insensitive Points-to Analysis for C'. In: Static Analysis Symposium. pp. 175--198.

No context found.

Je#rey S. Foster, Manuel Fahndrich, and Alexander Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In Proceedings of the Static Analysis Symposium, 2001.

No context found.

Je#rey S. Foster, Manuel Fahndrich, and Alexander Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In Proceedings of the Static Analysis Symposium, 2000.

No context found.

Je#rey S. Foster, Manuel Fahndrich, and Alexander Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In SAS, 2001.

No context found.

J. S. Foster, M. F ahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In pages 175--198, Apr. 2000.

No context found.

J. S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In pages 175--198, Apr. 2000.

No context found.

Foster, J., Fahndrich, M., Aiken, A.: Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In: Static Analysis Symp. (2000) 175--198

No context found.

J. S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In Proc. Static Analysis Symposium, volume 1824 of LNCS, pages 175--198. Springer-Verlag, 2000.

No context found.

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In Static Analysis Symposium, LNCS 1824, pages 175--198, 2000.

No context found.

J. S. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In Static Analysis Symposium, pages 175--198, 2000.

No context found.

J. Foster, M. Fahndrich, and A. Aiken. Polymorphic versus monomorphic flowinsensitive points-to analysis for C. In SAS, LNCS 1824, pages 175--198, 2000.

No context found.

Jeffrey S. Foster, Manuel Fahndrich, and Alexander Aiken. Polymorphic versus monomorphic flow-insensitive points-to analysis for C. In International Static Analysis Symposium, pages 175--198, 2000.

First 50 documents

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC