论文信息 - SLAyer: Memory Safety for Systems-Level Code

SLAyer: Memory Safety for Systems-Level Code

SLAyer is a program analysis tool designed to automatically prove memory safety of industrial systems code. In this paper we describe SLAyer's implementation, and its application to Windows device drivers. This paper accompanies the first release of SLAYER.

[1] Rajeev Alur,et al. A Temporal Logic of Nested Calls and Returns , 2004, TACAS.

[2] Peter W. O'Hearn,et al. BI as an assertion language for mutable data structures , 2001, POPL '01.

[3] Brian Campbell,et al. Amortised Memory Analysis Using the Depth of Data Structures , 2009, ESOP.

[4] Peter Lee,et al. THOR: A Tool for Reasoning about Shape and Arithmetic , 2008, CAV.

[5] Peter W. O'Hearn,et al. Scalable Shape Analysis for Systems Code , 2008, CAV.

[6] Peter W. O'Hearn,et al. Symbolic Execution with Separation Logic , 2005, APLAS.

[7] Sriram K. Rajamani,et al. Thorough static analysis of device drivers , 2006, EuroSys.

[8] Sorin Lerner,et al. ESP: path-sensitive program verification in polynomial time , 2002, PLDI '02.

[9] Peter W. O'Hearn,et al. Shape Analysis for Composite Data Structures , 2007, CAV.

[10] Peter W. O'Hearn,et al. A Local Shape Analysis Based on Separation Logic , 2006, TACAS.

[11] Alexey Gotsman,et al. Interprocedural Shape Analysis with Separated Heap Abstractions , 2006, SAS.

[12] Nikolaj Bjørner,et al. Z3: An Efficient SMT Solver , 2008, TACAS.