When Long Jumps Fall Short: Control-Flow Tracking and Misuse Detection for Non-local Jumps in C

Schwarz, Michael; Erhard, Julian; Vojdani, Vesal; Saan, Simmo; Seidl, Helmut

doi:10.1145/3589250.3596140

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Book2

Article1

Other1

Relationship

Self Cite0

Independent4

Authors

Journals

Cited by 4 publications

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Goblint: Abstract Interpretation for Memory Safety and Termination

Saan,

Erhard,

Schwarz

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

Goblint: Abstract Interpretation for Memory Safety and Termination

Saan,

Erhard,

Schwarz

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

Mopsa-C: Improved Verification for C Programs, Simple Validation of Correctness Witnesses (Competition Contribution)

Monat,

Milanese,

Parolini

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

We present advances we brought to Mopsa for SV-Comp 2024. We significantly improved the precision of our verifier in the presence of dynamic memory allocation, library calls such as , -based loops, and integer abstractions. We introduced a witness validator for correctness witnesses. Thanks to these improvements, Mopsa won SV-Comp’s SoftwareSystems category by a large margin, scoring 2.5 times more points than the silver medalist, Bubaak-SpLit.

show abstract

When long jumps fall short: control-flow tracking and misuse detection for nonlocal jumps in C

Erhard,

Schwarz,

Vojdani

et al. 2024

Int J Softw Tools Technol Transfer

View full text Add to dashboard Cite

The C programming language offers as a mechanism for nonlocal control flow. This mechanism has complicated semantics. As most developers do not encounter it day-to-day, they may be unfamiliar with all its intricacies – leading to subtle programming errors. At the same time, most static analyzers lack proper support, implying that otherwise sound tools miss whole classes of program deficiencies. We propose a concrete semantics of a subset of C with , where interprocedural s are performed directly, as well as an equivalent formulation where such jumps are implemented via stack-unwinding at the call-sites. Reflecting this semantic equivalence, we propose an approach for lifting existing interprocedural analyses to support and to flag their misuse. To deal with the nonlocal semantics, our approach leverages side-effecting transfer functions, which, when executed, may additionally trigger contributions for program points that are not static control-flow successors. We showcase our analysis on a real-world example and propose a set of litmus tests for other analyzers.

show abstract

When Long Jumps Fall Short: Control-Flow Tracking and Misuse Detection for Non-local Jumps in C

Cited by 4 publications

References 16 publications

Goblint: Abstract Interpretation for Memory Safety and Termination

Goblint: Abstract Interpretation for Memory Safety and Termination

Mopsa-C: Improved Verification for C Programs, Simple Validation of Correctness Witnesses (Competition Contribution)

When long jumps fall short: control-flow tracking and misuse detection for nonlocal jumps in C

Contact Info

Product

Resources

About