Wenhua, Li;
Le, Quang Loc;
Yahui, Song;
Wei-Ngan, Chin;
(2025)
Inferring Incorrectness Specifications for Object-Oriented Programs.
In: Gurfinkel, Arie and Heule, Marijn, (eds.)
Tools and Algorithms for the Construction and Analysis of Systems. TACAS 2025.
(pp. pp. 20-39).
Springer: Cham, Swotzerland.
Preview |
Text
Le_978-3-031-90643-5_2.pdf Download (400kB) | Preview |
Abstract
Incorrectness logic (IL) based on under-approximation is effective at finding real program bugs. The prior work utilises bi-abductive specification inference mechanism to infer IL specifications for analysing large-scale C projects. However, this approach does not work well with object-oriented (OO) programs because it does not account for class inheritance and method overriding. In our work, we present an IL specification inference system that tackles these issues. At its core, we encode type information in our bi-abductive reasoning and propagate type constraints throughout the analysis. The direct benefit is that we can efficiently identify bugs caused by improper usage of the casting operator, which cannot be handled by the existing specification inference. Meanwhile, our system can reduce false positives while finding more true bugs because of not losing OO-type information. Furthermore, we model dynamic dispatching calls by inferring dynamic specifications, where the possible types of the calling object at runtime are bounded by the type constraints. We prototype our system in ILoop and evaluate it using real-world projects. Experimental results show that it finds 400% more class-cast-exceptions compared with Error Prone and improves the precision of finding null-pointer-exceptions by 27.0% compared with Pulse.
| Type: | Proceedings paper |
|---|---|
| Title: | Inferring Incorrectness Specifications for Object-Oriented Programs |
| Event: | ETAPS 2025: 31st International Conference, TACAS 2025, Held as Part of the International Joint Conferences on Theory and Practice of Software |
| ISBN-13: | 978-3-031-90642-8 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1007/978-3-031-90643-5_2 |
| Publisher version: | https://doi.org/10.1007/978-3-031-90643-5_2 |
| Language: | English |
| Additional information: | This chapter is licensed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made. The images or other third party material in this chapter are included in the chapter's Creative Commons license, unless indicated otherwise in a credit line to the material. If material is not included in the chapter's Creative Commons license and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10203288 |
Archive Staff Only
 |
View Item |
