<div class="csl-bib-body">
<div class="csl-entry">Fleischmann, M., Kaindlstorfer, D. M., Isychev, A., Wüstholz, V., & Christakis, M. (2024). Constraint-Based Test Oracles for Program Analyzers. In V. Filkov, B. Ray, & M. Zhou (Eds.), <i>ASE ’24: Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering</i> (pp. 344–355). Association for Computing Machinery. https://doi.org/10.1145/3691620.3695035</div>
</div>
-
dc.identifier.uri
http://hdl.handle.net/20.500.12708/204056
-
dc.description.abstract
Program analyzers implement complex algorithms and, as any software, can contain bugs. Bugs in their implementation may lead to analyzers being imprecise and failing to verify safe programs, i.e., programs with no reachable error locations; or worse, analyzer bugs may lead to reporting unsound results by verifying unsafe programs, i.e., programs with reachable error locations.
In this paper, we propose a method to detect such bugs by generating constraint-based test oracles for analyzers. We re-purpose and extend Fuzzle, a tool for benchmarking fuzzers, in a tool called Minotaur. Minotaur generates C programs from SMT constraints, and based on the satisfiability of the constraints, derives whether the generated programs are safe or unsafe. For instance, for an unsafe program, an analyzer under test contains a soundness issue if it proves it safe. Using Minotaur, we found 30 unique soundness and precision issues in 11 well-known analyzers that reason about reachability properties.
en
dc.description.sponsorship
European Commission
-
dc.language.iso
en
-
dc.rights.uri
http://creativecommons.org/licenses/by-sa/4.0/
-
dc.subject
constraint-based test oracles
en
dc.subject
program analyzers
en
dc.subject
unsoundness
en
dc.subject
imprecision
en
dc.title
Constraint-Based Test Oracles for Program Analyzers
en
dc.type
Inproceedings
en
dc.type
Konferenzbeitrag
de
dc.rights.license
Creative Commons Namensnennung - Weitergabe unter gleichen Bedingungen 4.0 International
de
dc.rights.license
Creative Commons Attribution-ShareAlike 4.0 International
en
dc.contributor.editoraffiliation
Columbia University, United States of America (the)
