TU Darmstadt / ULB / TUbiblio

A New Invariant Rule for the Analysis of Loops with Non-standard Control Flows

Steinhöfel, Dominic ; Wasser, Nathan (2017)
A New Invariant Rule for the Analysis of Loops with Non-standard Control Flows.
Report, Bibliographie

Abstract

Invariants are a standard concept for reasoning about unbounded loops since Floyd-Hoare logic in the late 1960s. For real-world languages like Java, loop invariant rules tend to become extremely complex. The main reason is non-standard control flow induced by return, throw, break, and continue statements, possibly combined and nested inside inner loops and try blocks. We propose the concept of a loop scope which gives rise to a new approach for the design of invariant rules. This permits “sandboxed” deduction-based symbolic execution of loop bodies which in turn allows a modular analysis even of complex loops. Based on the new concept we designed a loop invariant rule for Java that has full language coverage and implemented it in the program verification system KeY. Its main advantages are (1) much increased comprehensibility, which made it considerably easier to argue for its soundness, (2) simpler and easier to understand proof obligations, (3) a substantially decreased number of symbolic execution steps and sizes of resulting proofs in a representative set of experiments. We also show that the new rule, in combination with fully automatic symbolic state merging, realizes even greater proof size reduction and helps to address the state explosion problem of symbolic execution.

Item Type: Report
Erschienen: 2017
Creators: Steinhöfel, Dominic ; Wasser, Nathan
Type of entry: Bibliographie
Title: A New Invariant Rule for the Analysis of Loops with Non-standard Control Flows
Language: English
Date: April 2017
Place of Publication: Darmstadt
Publisher: Technische Universität
Series: Technical Report
Corresponding Links:
Abstract:

Invariants are a standard concept for reasoning about unbounded loops since Floyd-Hoare logic in the late 1960s. For real-world languages like Java, loop invariant rules tend to become extremely complex. The main reason is non-standard control flow induced by return, throw, break, and continue statements, possibly combined and nested inside inner loops and try blocks. We propose the concept of a loop scope which gives rise to a new approach for the design of invariant rules. This permits “sandboxed” deduction-based symbolic execution of loop bodies which in turn allows a modular analysis even of complex loops. Based on the new concept we designed a loop invariant rule for Java that has full language coverage and implemented it in the program verification system KeY. Its main advantages are (1) much increased comprehensibility, which made it considerably easier to argue for its soundness, (2) simpler and easier to understand proof obligations, (3) a substantially decreased number of symbolic execution steps and sizes of resulting proofs in a representative set of experiments. We also show that the new rule, in combination with fully automatic symbolic state merging, realizes even greater proof size reduction and helps to address the state explosion problem of symbolic execution.

Uncontrolled Keywords: Program Verification, Loop Invariants, Abnormal Termination, Non-Standard Control Flow, Symbolic Execution, Proof Size Reduction
Divisions: 20 Department of Computer Science
20 Department of Computer Science > Software Engineering
Date Deposited: 07 Mar 2017 15:18
Last Modified: 15 Aug 2023 11:10
PPN:
Corresponding Links:
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)
Show editorial Details Show editorial Details