DMCA
Automatic predicate abstraction of C programs (2001)
Cached
Download Links
| Venue: | IN PROC. ACM PLDI |
| Citations: | 484 - 33 self |
BibTeX
@INPROCEEDINGS{Ball01automaticpredicate,
author = {Thomas Ball and Rupak Majumdar and Todd Millstein and Sriram K. Rajamani},
title = {Automatic predicate abstraction of C programs},
booktitle = {IN PROC. ACM PLDI},
year = {2001},
pages = {203--213},
publisher = {ACM Press}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Model checking has been widely successful in validating and debugging designs in the hardware and protocol domains. However, state-space explosion limits the applicability of model checking tools, so model checkers typically operate on abstractions of systems. Recently, there has been significant interest in applying model checking to software. For infinite-state systems like software, abstraction is even more critical. Techniques for abstracting software are a prerequisite to making software model checking a reality. We present the first algorithm to automatically construct a predicate abstraction of programs written in an industrial programming language such as C, and its implementation in a tool-- C2bp. The C2bp tool is part of the SLAM toolkit, which uses a combination of predicate abstraction, model checking, symbolic reasoning, and iterative refinement to statically check temporal safety properties of programs. Predicate abstraction of software has many applications, including detecting program errors, synthesizing program invariants, and improving the precision of program analyses through predicate sensitivity. We discuss our experience applying the C2bp predicate abstraction tool to a variety of problems, ranging from checking that list-manipulating code preserves heap invariants to finding errors in Windows NT device drivers.
Keyphrases
predicate abstraction automatic predicate abstraction model checking program analysis temporal safety property software model protocol domain predicate sensitivity first algorithm c2bp predicate abstraction tool iterative refinement model checker program invariant significant interest slam toolkit c2bp tool list-manipulating code preserve heap invariant infinite-state system tool c2bp symbolic reasoning industrial programming language many application window nt device driver program error model checking tool state-space explosion
