Proving LTL Properties of Bitvector Programs and Decompiled BinariesVirtual
Mon 18 Oct 2021 22:05 - 22:20 at Zurich D - Verification / Theory (mirror) Chair(s): Yue Li
There is increasing interest in applying verification tools to programs that have bitvector operations. SMT solvers, which serve as a foundation for these tools, have thus increased support for bitvector reasoning through bit-blasting and linear arithmetic approximations. In this paper we show that similar linear arithmetic approximation of bitvector operations can be done at the source level through transformations. Specifically, we introduce new paths that over-approximate bitvector operations with linear conditions/constraints, increasing branching but allowing us to better exploit the well-developed integer reasoning and interpolation of verification tools. We show that, for reachability of bitvector programs, increased branching incurs negligible overhead yet, when combined with integer interpolation optimizations, enables more programs to be verified. We further show this exploitation of integer interpolation in the common case also enables competitive termination verification of bitvector programs and leads to the first effective technique for LTL verification of bitvector programs. Finally, we provide an in-depth case study of decompiled (“lifted”) binary programs, which emulate X86 execution through frequent use of bitvector operations. We present a new tool DarkSea, the first tool capable of verifying reachability, termination, and LTL of lifted binaries.
Mon 18 OctDisplayed time zone: Central Time (US & Canada) change
13:50 - 15:10 | |||
13:50 15mTalk | Preprocessing of Alternating Automata for Language Emptiness TestingVirtual Research Papers Pavol Vargovčík Brno University of Technology, Czech Republic, Lukáš Holík Brno University of Technology | ||
14:05 15mTalk | Proving LTL Properties of Bitvector Programs and Decompiled BinariesVirtual Research Papers Cyrus Liu Stevens Institute of Technology, Chengbin Pang Stevens Institute of Technology, Daniel Dietsch University of Freiburg, Eric Koskinen Stevens Institute of Technology, Ton Chanh Le Stevens Institute of Technology, Georgios Portokalidis Stevens Institute of Technology, Jun Xu Stevens Institute of Technology | ||
14:20 15mTalk | Solving Not-Substring with Flat AbstractionVirtual Research Papers Parosh Aziz Abdulla Uppsala University, Sweden, Mohamed Faouzi Atig Uppsala University, Sweden, Yu-Fang Chen Academia Sinica, Taiwan, Bui Phi Diep Uppsala University, Sweden, Lukáš Holík Brno University of Technology, Denghang Hu State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Wei-Lun Tsai Academia Sinica, Zhilin Wu State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Di-De Yen Academia Sinica | ||
14:35 15mTalk | Termination Analysis for the $\pi$-Calculus by Reduction to Sequential Program TerminationVirtual Research Papers Tsubasa Shoshi The University of Tokyo, Takuma Ishikawa The University of Tokyo, Naoki Kobayashi University of Tokyo, Japan, Ken Sakayori The University of Tokyo, Ryosuke Sato University of Tokyo, Japan, Takeshi Tsukada Chiba University, Japan | ||
14:50 20mLive Q&A | Q&A and discussionVirtual Research Papers |
21:50 - 23:10 | |||
21:50 15mTalk | Preprocessing of Alternating Automata for Language Emptiness TestingVirtual Research Papers Pavol Vargovčík Brno University of Technology, Czech Republic, Lukáš Holík Brno University of Technology | ||
22:05 15mTalk | Proving LTL Properties of Bitvector Programs and Decompiled BinariesVirtual Research Papers Cyrus Liu Stevens Institute of Technology, Chengbin Pang Stevens Institute of Technology, Daniel Dietsch University of Freiburg, Eric Koskinen Stevens Institute of Technology, Ton Chanh Le Stevens Institute of Technology, Georgios Portokalidis Stevens Institute of Technology, Jun Xu Stevens Institute of Technology | ||
22:20 15mTalk | Solving Not-Substring with Flat AbstractionVirtual Research Papers Parosh Aziz Abdulla Uppsala University, Sweden, Mohamed Faouzi Atig Uppsala University, Sweden, Yu-Fang Chen Academia Sinica, Taiwan, Bui Phi Diep Uppsala University, Sweden, Lukáš Holík Brno University of Technology, Denghang Hu State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Wei-Lun Tsai Academia Sinica, Zhilin Wu State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Di-De Yen Academia Sinica | ||
22:35 15mTalk | Termination Analysis for the $\pi$-Calculus by Reduction to Sequential Program TerminationVirtual Research Papers Tsubasa Shoshi The University of Tokyo, Takuma Ishikawa The University of Tokyo, Naoki Kobayashi University of Tokyo, Japan, Ken Sakayori The University of Tokyo, Ryosuke Sato University of Tokyo, Japan, Takeshi Tsukada Chiba University, Japan | ||
22:50 20mLive Q&A | Q&A and discussionVirtual Research Papers |