A Foundation for Flow-Based Program Matching Using Temporal Logic and Model Checking

Abstract : Reasoning about program control-flow paths is an important functionality of a number of recent program matching languages and associated searching and transformation tools. Temporal logic provides a well-defined means of expressing properties of control-flow paths in programs, and indeed an extension of the temporal logic CTL has been applied to the problem of specifying and verifying the transformations commonly performed by optimizing compilers. Nevertheless, in developing the Coccinelle program transformation tool for performing Linux collateral evolutions in systems code, we have found that existing variants of CTL do not adequately support rules that transform subterms other than the ones matching an entire formula. Being able to transform any of the subterms of a matched term seems essential in the domain targeted by Coccinelle. In this paper, we propose an extension to CTL named CTL-VW (CTL with variables and witnesses) that is a suitable basis for the semantics and implementation of the Coccinelle's program matching language. Our extension to CTL includes existential quantification over program fragments, which allows metavariables in the program matching language to range over different values within different control-flow paths, and a notion of witnesses that record such existential bindings for use in the subsequent program transformation process. We formalize CTL-VW and describe its use in the context of Coccinelle. We then assess the performance of the approach in practice, using a transformation rule that fixes several reference count bugs in Linux code
Keywords : Model Checking Linux CTL
Document type :
Preprints, Working Papers, ...
Liste complète des métadonnées

Cited literature [25 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-00297708
Contributor : Gilles Muller <>
Submitted on : Thursday, July 17, 2008 - 10:53:05 AM
Last modification on : Friday, March 22, 2019 - 4:46:03 PM
Document(s) archivé(s) le : Friday, November 25, 2016 - 11:35:16 PM

File

EMN_INFO_02_8.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-00297708, version 2

Citation

Julien Brunel, Damien Doligez, René Hansen, Julia Lawall, Gilles Muller. A Foundation for Flow-Based Program Matching Using Temporal Logic and Model Checking. 2008. ⟨hal-00297708v2⟩

Share

Metrics

Record views

544

Files downloads

434