Scalable Context-Sensitive Pointer Analysis for LLVM
Abstract
Pointer analysis is indispensable for effectively verifying heap-manipulating programs.
Even though it has been studied extensively, there are no publicly available pointer analyses
for low-level languages that are moderately precise while scalable to large real-world programs.
In this thesis, we show that existing context-sensitive unification-based pointer analyses suffer
from the problem of oversharing – propagating too many abstract objects across the analysis
of different procedures, which prevents them from scaling to large programs.
We present a new pointer analysis for LLVM, called TeaDsa, with such an oversharing
significantly reduced. We show how to further improve precision and speed of TeaDsa
with extra contextual information, such as flow-sensitivity at call- and return-sites, and
type information about memory accesses. We evaluate TeaDsa on the verification problem
of detecting unsafe memory accesses and compare it against two state-of-the-art pointer
analyses: SVF and SeaDsa. We show that TeaDsa is one order of magnitude faster than
either SVF or SeaDsa, strictly more precise than SeaDsa, and, surprisingly, sometimes
more precise than SVF.
Collections
Cite this version of the work
Jakub Kuderski
(2019).
Scalable Context-Sensitive Pointer Analysis for LLVM. UWSpace.
http://hdl.handle.net/10012/14875
Other formats
Related items
Showing items related by title, author, creator and subject.
-
Testing the spatial affordance hypothesis: Evidence from factor analysis, mathematical models, and behavioural analysis
Barton, Kevin Richard (University of Waterloo, 2015-09-29)This thesis attempts to explain the apparent link between how we navigate the world around us and the physical properties that define that world. Despite a number of works indicating the substantial effect of the layout ... -
Data Envelopment Analysis may Obfuscate Corporate Financial Data: Using Support Vector Machine and Data Envelopment Analysis to Predict Corporate Failure for Nonmanufacturing Firms
Yang, Xiaopeng; Dimitrov, Stanko (Taylor & Francis, 2017)Corporate failure prediction has drawn numerous scholars’ attention because of its usefulness in corporate risk management, as well as in regulating corporate operational status. Most research on this topic focuses on ... -
Structure/reaction directed analysis for LC-MS based untargeted analysis
Yu, Miao; Olkowicz, Mariola; Pawliszyn, Janusz (Elsevier, 2019-03-07)In LC-MS based untargeted analysis, data is collected at the peak or ion level, although the investigated biochemistry processes occur at the compound or reaction level. To this end, the presence of redundancy peaks such ...