Tue 25 Jun 2019 09:10 - 09:30 at 229AB - Bug Finding & Testing I Chair(s): Cindy Rubio-González

This work studies the connection between the problem of analyzing floating-point code and that of function minimization. It formalizes this connection as a reduction theory, where the semantics of a floating-point program is measured as a generalized metric, called weak distance, which faithfully captures any given analysis objective. It is theoretically guaranteed that minimizing the weak distance (e.g., via mathematical optimization) solves the underlying problem. This reduction theory provides a general framework for analyzing numerical code. Two important separate analyses from the literature, branch-coverage-based testing and quantifier-free floating-point satisfiability, are its instances.

To further demonstrate our reduction theory’s generality and power, we develop three additional applications, including boundary value analysis, path reachability and overflow detection. Critically, these analyses do not rely on the modeling or abstraction of floating-point semantics; rather, they explore a program’s input space guided by runtime computation and minimization of the weak distance. This design, combined with the aforementioned theoretical guarantee, enables the application of the reduction theory to real-world floating-point code. In our experiments, our boundary value analysis is able to find all reachable boundary conditions of the GNU sin function, which is complex with several hundred lines of code, and our floating-point overflow detection detects a range of overflows and inconsistencies in the widely-used numerical library GSL, including two latent bugs that developers have already confirmed.

Tue 25 Jun
Times are displayed in time zone: Tijuana, Baja California change

08:30 - 09:30
Bug Finding & Testing IPLDI Research Papers at 229AB
Chair(s): Cindy Rubio-GonzálezUniversity of California, Davis
08:30
20m
Talk
Lazy Counterfactual Symbolic Execution
PLDI Research Papers
William T. HallahanYale University, Anton XueYale University, Maxwell Troy BlandUniversity of California at San Diego, USA, Ranjit JhalaUniversity of California, San Diego, Ruzica PiskacYale University, USA
Media Attached
08:50
20m
Talk
Sound Regular Expression Semantics for Dynamic Symbolic Execution of JavaScript
PLDI Research Papers
Blake Loring, Duncan MitchellRoyal Holloway, University of London, Johannes KinderBundeswehr University Munich
Media Attached
09:10
20m
Talk
Effective Floating-Point Analysis via Weak-Distance Minimization
PLDI Research Papers
Zhoulai FuIT University of Copenhagen, Denmark, Zhendong SuETH Zurich