Article thumbnail

Low-level liquid types

By Patrick Rondon, Ming Kawaguchi and Ranjit Jhala

Abstract

We present Low-Level Liquid Types, a refinement type system for C based on Liquid Types. Low-Level Liquid Types combine refinement types with three key elements to automate verification of critical safety properties of low-level programs: First, by associating refinement types with individual heap locations and precisely tracking the locations referenced by pointers, our system is able to reason about complex invariants of in-memory data structures and sophisticated uses of pointer arithmetic. Second, by adding constructs which allow strong updates to the types of heap locations, even in the presence of aliasing, our system is able to verify properties of in-memory data structures in spite of temporary invariant violations. By using this strong update mechanism, our system is able to verify the correct initialization of newly-allocated regions of memory. Third, by using the abstract interpretation framework of Liquid Types, we are able to use refinement type inference to automatically verify important safety properties without imposing an onerous annotation burden. We have implemented our approach in Csolve, a tool for Low-Level Liquid Type inference for C programs. We demonstrate through several examples that Csolve is able to precisely infer complex invariants required to verify important safety properties, like the absence of array bounds violations and NULL dereferences, with a minimal annotation overhead.

Year: 2011
OAI identifier: oai:CiteSeerX.psu:10.1.1.182.2440
Provided by: CiteSeerX
Download PDF:
Sorry, we are unable to provide the full text but you may find it at the following location(s):
  • http://citeseerx.ist.psu.edu/v... (external link)
  • http://pho.ucsd.edu/rjhala/liq... (external link)
  • Suggested articles


    To submit an update or takedown request for this paper, please submit an Update/Correction/Removal Request.